| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/IZLMtatxGM1y1qcj4EcEm/_ssgManifest.js |  76.76.21.241 | | 811 B |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/IZLMtatxGM1y1qcj4EcEm/_ssgManifest.js IP76.76.21.241:0
File typeASCII text, with very long lines (811), with no line terminators Hash4ff78952953e795b22ef97391aaf260b 7fcab2c58b662ce9861f15c3b29304458bc29f7d 8f1d5756562f822c21b0c1d0fae404402b2c981a5df0e45228587643d9598e9d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/IZLMtatxGM1y1qcj4EcEm/_ssgManifest.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 554944
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_ssgManifest.js"
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:52 GMT
etag: "4ff78952953e795b22ef97391aaf260b"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/IZLMtatxGM1y1qcj4EcEm/_ssgManifest.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::njzdx-1713939652159-25c4d88a56e8
content-length: 811
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/IZLMtatxGM1y1qcj4EcEm/_buildManifest.js | 76.76.21.241 | | 5.0 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/IZLMtatxGM1y1qcj4EcEm/_buildManifest.js IP76.76.21.241:0
File typeASCII text, with very long lines (16238), with no line terminators Hash9dab99c08ee63b509f9746c9e439da9e bac29bc5acb8a284fb276a41104f0a4f2b8ce148 7a3a7af0c7440fac81ce3fe8b5b16ae49a14bac75d91b70a890a93dca0a43b8e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/IZLMtatxGM1y1qcj4EcEm/_buildManifest.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 554944
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_buildManifest.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:52 GMT
etag: W/"9dab99c08ee63b509f9746c9e439da9e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/IZLMtatxGM1y1qcj4EcEm/_buildManifest.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::btclf-1713939652159-548c30fb6cf4
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/kanit/v15/nKKZ-Go6G5tXcraVGwA.woff2 | 216.58.207.227 | 200 OK | 19 kB |
URL GET HTTP/2fonts.gstatic.com/s/kanit/v15/nKKZ-Go6G5tXcraVGwA.woff2 IP216.58.207.227:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19388, version 1.0 Hashf816f16f297c801aaf01ff43c9fcd563 2e9e2c80bc5aa5f01f75cd486baa1769f53dea5e ae7b918efe7cd287651e014ed269c923e1a925c8eee1a474ad11184f04659d3e
GET /s/kanit/v15/nKKZ-Go6G5tXcraVGwA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19388
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:28:54 GMT
expires: Fri, 18 Apr 2025 17:28:54 GMT
cache-control: public, max-age=31536000
age: 478318
last-modified: Thu, 20 Jul 2023 20:53:09 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/logo.png | 76.76.21.241 | 200 OK | 23 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/logo.png IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 512 x 512, 8-bit colormap, non-interlaced Hash64b883944b59c73896ec40af9f94aab3 e0dfeea62f1ba1942c99d1e6cf14c2decb023d08 39c08d280e7f4636908c7648d8c779fa7b01a90ba04d869a94e461d4637de199
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /logo.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 550649
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="logo.png"
content-type: image/png
date: Wed, 24 Apr 2024 06:20:53 GMT
etag: "64b883944b59c73896ec40af9f94aab3"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /logo.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::62wz8-1713939653132-be754c214406
content-length: 22919
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/framework-9910fad42761648c.js | 76.76.21.241 | 200 OK | 55 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/framework-9910fad42761648c.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65200) Hash46b92cd043fe51d3018c33c2faccb623 2e49e403cd93b8bd131b754c8bb2cd95ad527c1f 6a002e3da5cdfbe42873232c822d868fd714564876f69f22a7187b989fa393ba
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/framework-9910fad42761648c.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 554945
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="framework-9910fad42761648c.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:52 GMT
etag: W/"46b92cd043fe51d3018c33c2faccb623"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/framework-9910fad42761648c.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::62wz8-1713939652151-9d0ca99dd767
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1732.580bc0b12da6139f.js | 76.76.21.241 | 200 OK | 189 B |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1732.580bc0b12da6139f.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text Hash193e391c62b77e9bf00ad62c66275408 cac60b876ba42ea941b680ed8f325494f67797e0 1b729ab7966f7245035cf1a2b13ab0cdfd7796e792c26c83fac40266679d1d7f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1732.580bc0b12da6139f.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 55339
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1732.580bc0b12da6139f.js"
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:53 GMT
etag: "193e391c62b77e9bf00ad62c66275408"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/1732.580bc0b12da6139f.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939653597-0ecc474987ca
content-length: 189
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/worker-chunks-ed675b153cc8567b.js | 76.76.21.241 | 200 OK | 253 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/worker-chunks-ed675b153cc8567b.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size253 kB (253298 bytes) Hash33d9bbcbcef3a9304bc8bcd2a6c9cecb c3c9e58d36f1aad04dba2b03204b4cb0ef29b334 7fd9ce983f68bb663f6064458935dfd3af549941887c4a93a6085da7e4959592
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/worker-chunks-ed675b153cc8567b.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 554944
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="worker-chunks-ed675b153cc8567b.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:52 GMT
etag: W/"33d9bbcbcef3a9304bc8bcd2a6c9cecb"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/worker-chunks-ed675b153cc8567b.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qpdmr-1713939652152-44f614254ad7
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=undefined | 142.250.74.40 | | 1.6 kB |
URL www.googletagmanager.com/gtm.js?id=undefined IP142.250.74.40:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hasha55d792fa2c4880da9de427b624deb8c f2a78fe277c43edb2ceb8834afb0d523cf87c5a0 0b0dba3ab30511b7e0e23c93298cf815f727945c9e9da80ba1df0229a3cd68b7
GET /gtm.js?id=undefined HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
date: Wed, 24 Apr 2024 06:20:53 GMT
content-type: text/html; charset=UTF-8
server: Google Tag Manager
content-length: 1580
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/900-011ae1c0fe9f9296.js | 76.76.21.241 | | 92 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/900-011ae1c0fe9f9296.js IP76.76.21.241:0
File typeJavaScript source, ASCII text, with very long lines (7906) Hashe75f525b1cebd7a66b61d6c6c82fdd83 4c8aaf5c01edba02b9f3b6dace601a727267ae87 7f4782afa58813033a144d804580091169838a97c9aa396e4e73a5021eaf5b13
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/900-011ae1c0fe9f9296.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 554930
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="900-011ae1c0fe9f9296.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:53 GMT
etag: W/"e75f525b1cebd7a66b61d6c6c82fdd83"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/900-011ae1c0fe9f9296.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::btclf-1713939653410-cf33fdb724b4
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8394-2b149c4bb6108264.js | 76.76.21.241 | 200 OK | 19 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8394-2b149c4bb6108264.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (44056) Hashca02cb21718db3ab448c7d8204be089e 1e3060cccd6eb155b6f35cdc6d1c33bf7dca49ba 530475dd121227c652eb45b2241e84f8c01b5c5d8937762d304e7b71b43b442d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8394-2b149c4bb6108264.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 55339
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8394-2b149c4bb6108264.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:53 GMT
etag: W/"ca02cb21718db3ab448c7d8204be089e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8394-2b149c4bb6108264.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939653602-650001d70a65
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/main-0785997221e18e7f.js | 76.76.21.241 | 200 OK | 41 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/main-0785997221e18e7f.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash46788ca3201af8ee2b7bd75d99ec91f9 607baf6837cb956f791773c1cbcfee5a3b53e89d 2b7ce862a23bf3a1e95d2f516165021c9e2e40061740c003d3ec48589ee271ed
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/main-0785997221e18e7f.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 554945
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="main-0785997221e18e7f.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:52 GMT
etag: W/"46788ca3201af8ee2b7bd75d99ec91f9"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/main-0785997221e18e7f.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n98b6-1713939652152-8c4b9ed91950
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/images/astronaut-bunny.png |  104.26.3.169 | 200 OK | 76 kB |
URL GET HTTP/2assets.pancakeswap.finance/web/images/astronaut-bunny.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 700 x 700, 8-bit colormap, non-interlaced Hash5921096d3e259c17b327ff060993a2fe 5a12f77a481be93028ed6a1d80b17a7a11984887 263eeb3af9fea872adb6e984753b8fc609f636b4e800ecba2d4bee33cbfcc50c
GET /web/images/astronaut-bunny.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:53 GMT
content-type: image/png
content-length: 75877
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "12ba5a602b78afe34c86fd5751daf5ff"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KEyjVgAq%2FbCuzmHu0I2ft%2FlU4WC3Fd7uFPNBZ5AQZJ5SQ9Alxsji%2FOngHn%2FGmJVlzOJpB%2BxmrNJMunYTS0wFaJ%2BU%2BiKxtRlp2Dpj9YKUmkix%2Bsu5R7Q1M5CGl5S7WDaH252ZzeuCsn3nVZWM2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd74beb6569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/2892.b79a9cb802c91f90.js | 76.76.21.241 | 200 OK | 20 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/2892.b79a9cb802c91f90.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (1078) Hash7edeb49623cf722b6cd8833bdff0620c 6315841f4f8d6f2414276a8ab74a983041ea931e ea1a65d95c35dfa993bb6dfcc324966bc072c1630e5018ee4fb26fc03af5393f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2892.b79a9cb802c91f90.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 55336
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="2892.b79a9cb802c91f90.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: W/"7edeb49623cf722b6cd8833bdff0620c"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/2892.b79a9cb802c91f90.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939654004-646c979cc2de
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/css/f15ae5acfa72202a.css | 76.76.21.241 | 200 OK | 167 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/css/f15ae5acfa72202a.css IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size167 kB (166834 bytes) Hash40eb3e05a48057f33a952ad321a0a9c5 dd84ac5bb29de4c4987f4b51f226488bb8f3bd34 4f9445c8e4d2c918dbe08691d7efd12dbc63b6c0c0c85846fb7c5d35e45bc3fd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/f15ae5acfa72202a.css HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 554945
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="f15ae5acfa72202a.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Wed, 24 Apr 2024 06:20:52 GMT
etag: W/"40eb3e05a48057f33a952ad321a0a9c5"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/css/f15ae5acfa72202a.css
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::kht88-1713939652150-211318ef96cc
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/kanit/v15/nKKU-Go6G5tXcr5KPxWpVaF5NQ.woff2 | 216.58.207.227 | 200 OK | 20 kB |
URL GET HTTP/3fonts.gstatic.com/s/kanit/v15/nKKU-Go6G5tXcr5KPxWpVaF5NQ.woff2 IP216.58.207.227:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19636, version 1.0 Hash22aeb837a470326fe42ab217a37cea2a 46a4d8b6f9fc8f7bd2471be93a63fed40126e415 ae193f732cb0b2f333c561c7fb758f3a83e841a79da350e7030c492d3446fea9
GET /s/kanit/v15/nKKU-Go6G5tXcr5KPxWpVaF5NQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19636
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:53:37 GMT
expires: Fri, 18 Apr 2025 02:53:37 GMT
cache-control: public, max-age=31536000
age: 530837
last-modified: Thu, 20 Jul 2023 20:54:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/webpack-d8440d89d291090e.js | 76.76.21.241 | 200 OK | 80 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/webpack-d8440d89d291090e.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (8594) Hash6954362172b178b32b1d54a12494c54a c34c7f8697acb0b620597eff6600bd3510561431 509288c24f58c62c52b3d1b45e2d5000dafbee758821cb477c3fdaaa00dac30f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/webpack-d8440d89d291090e.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 554945
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="webpack-d8440d89d291090e.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:52 GMT
etag: W/"6954362172b178b32b1d54a12494c54a"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/webpack-d8440d89d291090e.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939652151-39b9b7a8c9e1
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/2967-fe946b395aaeebd1.js | 76.76.21.241 | 200 OK | 5.1 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/2967-fe946b395aaeebd1.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (9853) Hash578d63ca0493490ce8053c7c7b719eed d68048d2f9de8dc1f98f2890e9db7c29a212d991 640b1be41cc2dd921633b48af99a5b99b6a167f76f4b83e85ea99efe51e73d7e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2967-fe946b395aaeebd1.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 541034
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="2967-fe946b395aaeebd1.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:52 GMT
etag: W/"578d63ca0493490ce8053c7c7b719eed"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/2967-fe946b395aaeebd1.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::mx86h-1713939652155-348e65f9ff8a
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/6721-0be97caa489e2582.js | 76.76.21.241 | | 9.0 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/6721-0be97caa489e2582.js IP76.76.21.241:0
File typeJavaScript source, ASCII text, with very long lines (3689) Hashd3c52241d92d609033817049436c55a0 ebba265c18c2992d063a1fbfb8c3fe008a47f663 8d805001dcdbe9fb051f38617cf0819ddb4e634f5fc0637b76262990c6e12037
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6721-0be97caa489e2582.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 541034
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="6721-0be97caa489e2582.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:52 GMT
etag: W/"d3c52241d92d609033817049436c55a0"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/6721-0be97caa489e2582.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::6m4hn-1713939652159-73641bb77909
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5751-b83430b6fe5b83cd.js | 76.76.21.241 | 200 OK | 12 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5751-b83430b6fe5b83cd.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (8900) Hashe4e7eb33f60882397fddf16b8b4df3ba ec21ffa140261bb6bc46231f425a67e99b17a2d7 3a78aedfa395cad4e5b50ce888f1675033039f657633e0e1a46724e80c543940
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5751-b83430b6fe5b83cd.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 541034
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5751-b83430b6fe5b83cd.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:52 GMT
etag: W/"e4e7eb33f60882397fddf16b8b4df3ba"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/5751-b83430b6fe5b83cd.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n98b6-1713939652159-a65323c80d1c
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/opera.png | 104.26.3.169 | | 3.3 kB |
URL assets.pancakeswap.finance/web/wallets/opera.png IP104.26.3.169:0
CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hashb8c2ee0a8b6673889f895e1c5ffed2c6 a2a4069ababd5db01f0b3d8fd4392964e1c334e1 3a93e883601c13e72381165bd035155f531e30560acd737401d4ac93053b9be5
GET /web/wallets/opera.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:54 GMT
content-type: image/png
content-length: 3287
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "a3bf28b12102f3e4cf1ccaa356175d44"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YzVKLRRpGYT3OmLKraSFI6YY4j7%2B1FWCLKCqxjyf1ISMXwsx8iuyIgaTayZ4OlaGeg7fHhfZglP7ShJpujkUi%2BwjoGaym5MsvJc4Zmdu4NsnsIBPaOcjcCZed7yWEP3Wtatl0tSAhj8YHlwsZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 1422
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd76aefab4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/wallets/trust.png | 104.26.3.169 | | 2.2 kB |
URL assets.pancakeswap.finance/web/wallets/trust.png IP104.26.3.169:0
CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hasha5c44f3a69730488cf69035aa91acdfa 74c6ccff8f5c3227d0216f63fd9a9000205ae011 c0a5155f81490256cb607244e502bbd86998e6e3c5c826cfd3fa86fb2993c739
GET /web/wallets/trust.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:54 GMT
content-type: image/png
content-length: 2177
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "62f570988d31ae1821180d7c1b61ef8f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uHwtXZTSju3V7xRsxoCsRJR0qpmAaRoVNAIysTW9H1bA%2F3HfkLdFhMLAPmXutf9pptKWRP3fOyQYpPDVYYfgpaHDOq4EA8vGHccqcV6RVXM0h3GuMvkhDUDf%2Fvr3FuL58mjT7TE3lUz2Y601XQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 1422
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd76aef8b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/2868-302561ecbfb2a18b.js | 76.76.21.241 | | 26 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/2868-302561ecbfb2a18b.js IP76.76.21.241:0
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash954b84426d9e65c773d88e6b01e24de6 4a5208c5613a973fe2a453fbd0b33bb5996486f8 a932a845187f8d73536c55908841a6867c729a422b226ac1c7f0e97c2c4ac7e4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2868-302561ecbfb2a18b.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="2868-302561ecbfb2a18b.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:52 GMT
etag: W/"954b84426d9e65c773d88e6b01e24de6"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/2868-302561ecbfb2a18b.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::btclf-1713939652154-f790c9074858
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/ledger.png | 104.26.3.169 | 200 OK | 1.1 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/wallets/ledger.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit gray+alpha, non-interlaced Hash05c6aca3b2fc8f03e01b480dc905625b 1aff06fe61565ce1951622b1759a5889f81e61bb 9f515d462e131ea77573fca64bb2a138dc497434b928c372ecdf8a83e33217df
GET /web/wallets/ledger.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:54 GMT
content-type: image/png
content-length: 1061
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "fc5d6f0a18bc8c7811331e13d9d7c96f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V42tCBKXSCJE0S4J5a4u36T8auwPIqd1feFNNFJOs0ezPNuLae6FDNO%2FZEPhBR6O3UukzkN8K3Sg4iR9t59dufnSEAmWZpKkPAchxhmcTZkfuDw1dN6sRCin%2Bds07XhKMg7S%2BOV3CXSwLvlm4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd76aef4b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/wallets/binance.png | 104.26.3.169 | 200 OK | 1.6 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/wallets/binance.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hash355630229f4891e998c71d378b7a4e16 0a2c961f6fefb268075675fa3cab150c100157e9 820f2729d566b9d78993e53ec403b1b84def82ea1a181adce24ed558f7d58c5e
GET /web/wallets/binance.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:54 GMT
content-type: image/png
content-length: 1588
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "5c6735d127234cb2d01c5a96a1eb48c8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F%2BMgj2X%2B6lBtW47HaUmSqrqYjSiFu5m8M%2BA1pdbAJHcgLy9OZjNZN9OZjWinLGHLAg0KyQNNHOFlkMVQ%2FPoA%2FGBhdJEzeiQ5EgUTFyvEYma0uAYPt%2B3MW8ILdNCH%2FAt%2F3JiZqHF3mQ7%2B%2BL7bOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd76aef7b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/lunar-bunny/star-l@2x.webp | 76.76.21.241 | | 4.4 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/lunar-bunny/star-l@2x.webp IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hashbe140bb7d25840b7769359bd2f2fed55 5cf57ee3b967bfa30da44d82837a58f939a412ea 7bd6d505c76583027797b365c50aee9066fe86def4aeab5b1677478e163e20d2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/lunar-bunny/star-l@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="star-l@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "be140bb7d25840b7769359bd2f2fed55"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/lunar-bunny/star-l@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n98b6-1713939654264-9931f6477066
content-length: 4444
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/lunar-bunny/star-r@2x.webp | 76.76.21.241 | 200 OK | 6.8 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/lunar-bunny/star-r@2x.webp IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashcebe45c56134db4c93b9770d5188ff9e f457131beb084b1b85a2b0b795a801900938a43a 3b2f178b4864bdc07a4c3832edce48af25f9be8843e9d87ad76821b3e8aceb6e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/lunar-bunny/star-r@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="star-r@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "cebe45c56134db4c93b9770d5188ff9e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/lunar-bunny/star-r@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::btclf-1713939654265-676869a02f77
content-length: 6832
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/lunar-bunny/star-top-r@2x.webp | 76.76.21.241 | 200 OK | 4.9 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/lunar-bunny/star-top-r@2x.webp IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashff9e6f7fc4a47e7949275b8068f0e4bc 79c21e135f81671eb7dac4b8421dfa0e060f2e54 bb2bd9b324be1234014185baa3ea76d56afcf4e84ff7c22019694532b21659ec
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/lunar-bunny/star-top-r@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="star-top-r@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "ff9e6f7fc4a47e7949275b8068f0e4bc"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/lunar-bunny/star-top-r@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n98b6-1713939654267-b4b289f8e308
content-length: 4930
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/trade/BNB@2x.webp | 76.76.21.241 | 200 OK | 14 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/trade/BNB@2x.webp IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash75a36f242bf8be49bb8f86d12855a686 419e6c347ba83e7d0fcae024b62368b6421b5399 a315495bbb5912575e9d4196498fb17de5f24e7cea8f4e367018965355501f4f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/trade/BNB@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="BNB@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "75a36f242bf8be49bb8f86d12855a686"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/trade/BNB@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::btclf-1713939654268-06490a051451
content-length: 13512
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/trade/BTC@2x.webp | 76.76.21.241 | | 17 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/trade/BTC@2x.webp IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hashf4062bb3e67c072529f5d5ec9498db76 1d3a26b7941e35d10715956372c2d3d9901bb8fb 607f2538119202e00102a5e5722d0abefc899436ff6f8041292d6969c9c1e591
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/trade/BTC@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="BTC@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "f4062bb3e67c072529f5d5ec9498db76"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/trade/BTC@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939654270-579c5cd5cf91
content-length: 17026
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/earn/pie@2x.webp | 76.76.21.241 | 200 OK | 13 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/earn/pie@2x.webp IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash9c06f61d9f69ed7bb4dc69267dc473c8 1b262fef58da5f3781a361d241eee68fad896a91 7a3e111ecb5ead7a6f2c4a4f0a6ec5956255fb5a466017c8da7433b404db21a4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/earn/pie@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="pie@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "9c06f61d9f69ed7bb4dc69267dc473c8"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/earn/pie@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::btclf-1713939654272-efa9d2afb515
content-length: 12730
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/earn/stonks@2x.webp | 76.76.21.241 | 200 OK | 18 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/earn/stonks@2x.webp IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash9ac5d85ce119e6a0f94cf9047836c043 5894c346533ab4ceba56df169b64e1b7846db01c a5d46a8aaef9a66ebb21b79d07c309ca5a36b91f452bc48b1e17a7d067589c83
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/earn/stonks@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="stonks@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "9ac5d85ce119e6a0f94cf9047836c043"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/earn/stonks@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n98b6-1713939654272-f3e480613b4d
content-length: 17692
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/earn/folder@2x.webp | 76.76.21.241 | 200 OK | 24 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/earn/folder@2x.webp IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashd2839275ccf112ac6004e02aed2b163c 8e978a5464cb38f01e1741b6f2f09d9adb30c5dc c671fee2b76908f5683550b73c932b251439c7f37e129b3f6cb0f35bbc713347
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/earn/folder@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="folder@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "d2839275ccf112ac6004e02aed2b163c"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/earn/folder@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::btclf-1713939654274-a5f9ce61916b
content-length: 23524
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/prediction-cards/bottom-left@2x.webp | 76.76.21.241 | | 27 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/prediction-cards/bottom-left@2x.webp IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hash7d6ca43b61f07dc6540247711e038d9c 1a9ef6ccc1bd47a087f53c7efcf6e8e353c4e165 f6aef04c525c09429ba55638f68e4c63abb51b1f2148f152f343d89dc7c72b94
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/prediction-cards/bottom-left@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="bottom-left@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "7d6ca43b61f07dc6540247711e038d9c"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/prediction-cards/bottom-left@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939654275-64a9a00cb326
content-length: 27006
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/prediction-cards/red@2x.webp | 76.76.21.241 | 200 OK | 18 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/prediction-cards/red@2x.webp IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash20e4289908d3cc61545bea7005167ec7 5f56452118edae9fe4890fb65307ac606ad38535 517a1e6ada3afbbcd2f63b385fc59ba9f8988370b9365a8c3bd3d179f4566727
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/prediction-cards/red@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="red@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "20e4289908d3cc61545bea7005167ec7"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/prediction-cards/red@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939654277-c6ac74b041df
content-length: 17990
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/prediction-cards/green@2x.webp | 76.76.21.241 | | 20 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/prediction-cards/green@2x.webp IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hasha005661a028352b5312f9a737f0ddbb7 95d6bbb2dbee6a155ce32c5e225a21b55bc621b6 ef7bae39747c8c8e4be81c371ae0ff291c18f6d2f17c4212ddb045636d5f8e80
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/prediction-cards/green@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="green@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "a005661a028352b5312f9a737f0ddbb7"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/prediction-cards/green@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n98b6-1713939654277-f11c8e5b438d
content-length: 19546
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/trade/CAKE@2x.webp | 76.76.21.241 | | 16 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/trade/CAKE@2x.webp IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hashe82f95cba00978df12a5bbae8b7545e0 da656611239d6a8d09e41babf0fc5618a2ffb41f 88d30442ffbb47b43daed16543d216def192dce7a2cd70acd843978931b73de1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/trade/CAKE@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="CAKE@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "e82f95cba00978df12a5bbae8b7545e0"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/trade/CAKE@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::mlsjh-1713939654270-902853550843
content-length: 15662
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/prediction-cards/top-right@2x.webp | 76.76.21.241 | | 22 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/prediction-cards/top-right@2x.webp IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hash2e907ed89c4201b58a025f2bcff0ba39 d40ea11e3aed915f3c93d63b6467ca69b1fc8f70 1fd8effd1dad2cf43d43312c812e1008ce5d31901f9f9c982fcbca1a7ba2324b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/prediction-cards/top-right@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="top-right@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "2e907ed89c4201b58a025f2bcff0ba39"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/prediction-cards/top-right@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::mlsjh-1713939654284-703cf604fa4c
content-length: 21536
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/2@2x.webp | 76.76.21.241 | 200 OK | 10 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/2@2x.webp IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash35e1ab38c57e590c6bb91e0a5895aad8 7033a549779d7dae87ccd3a2e3515fadf0c32fd0 ed51ebfcf74682ff93d0dd6d6be909fa0092ea334c4e63d114ca3737ec9a78b9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/lottery-balls/2@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="2@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "35e1ab38c57e590c6bb91e0a5895aad8"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/lottery-balls/2@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n98b6-1713939654284-7505cda03928
content-length: 10084
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/4@2x.webp | 76.76.21.241 | | 15 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/4@2x.webp IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hash1310c02ce46cfd0b0e6f2e4eae645f76 e0379827fd0c9628cde4fe17db40c8ae87672174 a40e5954e6b0bfd9f827a36387d5ac69c1522a99f3df47a0f240c32bf56f15c1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/lottery-balls/4@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="4@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "1310c02ce46cfd0b0e6f2e4eae645f76"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/lottery-balls/4@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939654285-ec35e2b8cce5
content-length: 14940
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/7@2x.webp | 76.76.21.241 | 200 OK | 27 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/7@2x.webp IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashfde53433e327e1ecfdb6acf703f2860c cd841af68e033e4bdddbdf78c2c7e3707f9835ff dcec26d1f3c498127e1e0608e496170e1f60ba5a6c73efdc85b77db3232d052a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/lottery-balls/7@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="7@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "fde53433e327e1ecfdb6acf703f2860c"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/lottery-balls/7@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939654291-9b2c022b0c10
content-length: 27020
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/6@2x.webp | 76.76.21.241 | | 19 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/6@2x.webp IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hash7c12e656c90ab0f1e82dbe7fada3923e a896150c629140461742055f2ffdadaa611b768d 197d140928f7101c1b95f4fcc94366c06cc873cb795a223cd909d577d4e78e52
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/lottery-balls/6@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="6@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "7c12e656c90ab0f1e82dbe7fada3923e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/lottery-balls/6@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n98b6-1713939654287-bceef1cc9a35
content-length: 19054
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/cake/bottom-right@2x.webp | 76.76.21.241 | | 8.9 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/cake/bottom-right@2x.webp IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hash1e2ed235e22f8ec23ad56beda85d52d9 53996553d82ff91d1aa8d8b2a450d9f65aca2404 b0a9c3cb61b0a75ac106b03f216b6397c758cdbe2f287b34346dafce376e428c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/cake/bottom-right@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="bottom-right@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "1e2ed235e22f8ec23ad56beda85d52d9"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/cake/bottom-right@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939654294-490d0179fbdd
content-length: 8874
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/9@2x.webp | 76.76.21.241 | 200 OK | 10 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/lottery-balls/9@2x.webp IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash858ff98f181ba77c8ace52883227204c 4fdd2f2d79bcbbb859c5a489027130e9a27d6b7d 44b511b9e36f9dee5f745fa3d1cd50c5a752831e6e02aeb71e38692a50bf14cb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/lottery-balls/9@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="9@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "858ff98f181ba77c8ace52883227204c"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/lottery-balls/9@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::mlsjh-1713939654291-5f31748cad40
content-length: 10060
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/cake/top-right@2x.webp | 76.76.21.241 | 200 OK | 15 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/cake/top-right@2x.webp IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashefde83af55252c361b98cf640e04d519 0f0442d4cc462ac4de41034e5d33620199bcb2bc 9b35a86f0fcf141a5c42a0a2877a8fbdde129dee01334584874e7eab0300cd29
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/cake/top-right@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 55333
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="top-right@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "efde83af55252c361b98cf640e04d519"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/cake/top-right@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::mlsjh-1713939654298-b82b54bf2113
content-length: 15104
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/cake/coin@2x.webp | 76.76.21.241 | | 25 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/cake/coin@2x.webp IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hashb5b71b72423d3f33221fdc8ecfa8a79e b8db0a46eb69ce73e03d1b1ea10f72311047f3c2 bb1b354c2266424da4b3df33f85799f3848ea7cc8885efac16f957a745c2cbde
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/cake/coin@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="coin@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "b5b71b72423d3f33221fdc8ecfa8a79e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/cake/coin@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939654298-61d361d332f3
content-length: 25072
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/cake/top-left@2x.webp | 76.76.21.241 | | 8.5 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/cake/top-left@2x.webp IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hash38e19d0d5eda4da9793b994a66423f72 124e977cb90b131fb168bea20bbd6a0fe861ee4a 29a06acce7f00d54fd015a3d19d4388adb51ecaade86e1a5a9fbd979630093ba
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/cake/top-left@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 55331
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="top-left@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "38e19d0d5eda4da9793b994a66423f72"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/cake/top-left@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939654304-b71911b50f0d
content-length: 8510
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/1-bottom@2x.webp | 76.76.21.241 | 200 OK | 8.1 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/1-bottom@2x.webp IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashf8c2d80c86b035b00ff82b656a482b09 22755ab74c1ce40200ee6bed19db72d65b41668f b54623c62c7dbde1fc194170bca1310ee8a59e9eb0f120b1d98c31312e2344bf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/flying-pancakes/1-bottom@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="1-bottom@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "f8c2d80c86b035b00ff82b656a482b09"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/flying-pancakes/1-bottom@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939654308-67f1304a4bf9
content-length: 8108
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/1-left@2x.webp | 76.76.21.241 | 200 OK | 22 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/1-left@2x.webp IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hasha2341c85eba52e31cea4e4b23bf7b340 995a07d062239581e28994f20913326d8e9a4a58 3650fccbec3a0bca23d851ad0c95de0517d360beed62d7defcf12c54fb0795ed
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/flying-pancakes/1-left@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="1-left@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "a2341c85eba52e31cea4e4b23bf7b340"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/flying-pancakes/1-left@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939654313-b84430e9a11d
content-length: 22126
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7276-1994f037d99445fb.js | 76.76.21.241 | | 9.2 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7276-1994f037d99445fb.js IP76.76.21.241:0
File typeJavaScript source, ASCII text, with very long lines (28281) Hashdcdd635796466b8204bf0f6de14521b8 46d41a97eee64856765c3cb1046e7c50917bd287 29bce8774b9aba8478636b7e4dafa7c2c6a69e18ae700b2e4ec8ce44748aea74
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/7276-1994f037d99445fb.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 541034
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="7276-1994f037d99445fb.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:52 GMT
etag: W/"dcdd635796466b8204bf0f6de14521b8"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/7276-1994f037d99445fb.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::hsp2k-1713939652155-ee793ef10848
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/2-bottom@2x.webp | 76.76.21.241 | | 9.9 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/2-bottom@2x.webp IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hash88603d52da34fe4ca9f806e977f1a41a fb8f71878a6b364bf26abb8a7e8f3237b53fbe8b b28f4aa831721b37bc9d451b5d8c5bb5590310dfeeebdd80692a7246728c64b5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/flying-pancakes/2-bottom@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="2-bottom@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "88603d52da34fe4ca9f806e977f1a41a"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/flying-pancakes/2-bottom@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::mlsjh-1713939654341-5af0665330c2
content-length: 9892
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/1-top@2x.webp | 76.76.21.241 | 200 OK | 12 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/1-top@2x.webp IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash49588b7810ff6c85053db84d94100bb6 19fdf997336131a89abd66bcda5fd540729b628f 99299b7457f5ef292363848a2408c170a961c99938c734624124223f64bf1b0f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/flying-pancakes/1-top@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="1-top@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "49588b7810ff6c85053db84d94100bb6"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/flying-pancakes/1-top@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939654341-b894cedcfe45
content-length: 12010
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/2-top@2x.webp | 76.76.21.241 | 200 OK | 16 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/2-top@2x.webp IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash817844dca6e8bfddbd798374497f8b91 fc5a87da1a1ac201f913b46b1cf254601daa53ad d4010f6737410456697d4632dba5b83fda5b8af4028186c0eff7ef7a1cd07e79
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/flying-pancakes/2-top@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="2-top@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "817844dca6e8bfddbd798374497f8b91"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/flying-pancakes/2-top@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939654343-46f0e126ba99
content-length: 16374
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/2-right@2x.webp | 76.76.21.241 | 200 OK | 16 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/home/flying-pancakes/2-right@2x.webp IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashab4f8badc3233bd79445480def206df0 6da58c32d7ac5428a9173668ae61c27327122845 c7ff6397d8b378c851cbb85d108a7e311a2bf3a9dd1a1b5d0473b01c843cf23f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/home/flying-pancakes/2-right@2x.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 541035
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="2-right@2x.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: "ab4f8badc3233bd79445480def206df0"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/home/flying-pancakes/2-right@2x.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939654348-0a40bb142a2d
content-length: 16188
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:20:54 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/_app-d21bca908dc69ade.js | 76.76.21.241 | 200 OK | 775 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/_app-d21bca908dc69ade.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (45953) Size775 kB (775011 bytes) Hash5ccb3933ed0f6943f5fc3accdd668805 c0d653bde07f1bc940d3c9a9805dda3fde3e6e68 12f43356d31fb7bf87a503efe3781403f42d246f3f3d19053c094723a70882b4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/_app-d21bca908dc69ade.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 554944
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_app-d21bca908dc69ade.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:52 GMT
etag: W/"5ccb3933ed0f6943f5fc3accdd668805"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/pages/_app-d21bca908dc69ade.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::btclf-1713939652153-9b68253ec953
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:20:54 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| hub.snapshot.org/graphql | 104.26.12.125 | 204 No Content | 25 B |
IP104.26.12.125:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjecthub.snapshot.org Fingerprint51:92:07:17:6E:EC:8E:CB:EB:58:16:46:A8:FD:FD:5C:48:F4:F4:69 ValiditySat, 30 Mar 2024 23:28:55 GMT - Fri, 28 Jun 2024 23:28:54 GMT
Hashcdc8512ced83004a90115850c9b5608b b6eb57230b2dc1f0e7ba40ab793e36bda69eed09 699671a256296a7dda710792eb11c9dc11bb7087387f2ef3057e17e5e669cda4
POST /graphql HTTP/1.1
Host: hub.snapshot.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
content-type: application/json
Content-Length: 629
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:54 GMT
content-type: application/json; charset=utf-8
content-length: 25
access-control-allow-origin: *
ratelimit-policy: 100;w=60
ratelimit-limit: 100
ratelimit-remaining: 99
ratelimit-reset: 60
etag: W/"19-tutXIwstwfDnukCreT42vaae7Qk"
x-do-app-origin: 9134fcd0-e6bb-11ec-b1dc-0c42a19a82a7
cache-control: private
x-do-orig-status: 200
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=guKIk%2FV9CPM0Tqh3%2Fi0SEINbSHgq5vKfpMj8R8YRa%2BkFrOuI0A3HtAbXRgCsIG84RCuPu33H8b7KZZe3Zh4qynDqgjKuimoB%2FxEGSYfY9H0CKjgilr4SnSw1N0hhz6ua%2F8M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793fd780b85568b-OSL
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/css/d17697a543226a3f.css | 76.76.21.241 | 200 OK | 5.2 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/css/d17697a543226a3f.css IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (12031) Hashb80619f45b0a559fb9753cf421927c8c 040f73d81edb8cc00315c757d0de8a8e5ce7abb9 5ff0b2aaace336e34deded8e9b47d6d6db5fe5ecb1937fd2a64c9ae5c707643f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/d17697a543226a3f.css HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 541036
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="d17697a543226a3f.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: W/"b80619f45b0a559fb9753cf421927c8c"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/css/d17697a543226a3f.css
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939654398-d761eb4eaf0e
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/chains/1.png | 104.26.3.169 | 200 OK | 1.2 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/1.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 48 x 48, 8-bit colormap, non-interlaced Hash236ecd183d696e37d949d8cf70a2bbd5 8eaa89051b171e1a35e226ca5d2eba058f7a6253 4540f0e53f6ed66e0dea773269c2b0d5698ebb1f7025cafe2358d6b78ac421d6
GET /web/chains/1.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: image/png
content-length: 1179
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "27a3beb7256d43dbe9c6e41a4550d156"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7%2BdvzhyI5NnpjIqVvZcvIH2vdoS%2F41VDl1sbYtYIzyUoTpRxQKK1bzkfLZhGxsq75r6DIMkd76dEe7Ccex0JB2zeRHljHJ4yjy5UNk9YP7b2PvRZlGlvbsHQRpzZ9hKZIU%2F1Mc5HWoNCcA7m3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 1423
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd7bba4fb4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/chains/1101.png | 104.26.3.169 | 200 OK | 86 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/1101.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced Hash8d6cd83ec34994330abbebd0a65c2f7b 9a84b286c689dba40169902e89a36022a474371e 476e4017b3f83e891214f87e60bcfcd1624f905065f436f745491222f0736f6a
GET /web/chains/1101.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: image/png
content-length: 86383
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "7e76b94cdc0f9628ecef8c8bb234f3ba"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qoa2WTvXokOlmO%2FrErfDqQiTCeUA1qXXc%2BTJEzNV2cK90%2FRJGhpn%2BsgpkDckyytSwFybVsWo0EWk6G6SdZYD3OlPbV4n2KFsQbaancQiJIvAcaoS%2FHTevfqBs9Euw%2B7Al%2FjGc18oCKZ5DAVXcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 1423
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd7bba51b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/chains/324.png | 104.26.3.169 | 200 OK | 738 B |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/324.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hash140504c38ceb01bbbe1632ebfd047ec5 f301254d5972ead4839dad92b9c322dde76a6e75 ad9d9c13aed41cdaaa4749bb6337aced91d1fe7ad378e1e1ac5525a706a21fe0
GET /web/chains/324.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: image/png
content-length: 738
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "141f703bc2926deca57513a5c3c8eb04"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3abSMnwVKxIFYCTz4NZS22RBt6H8YtPqQrYp8NR2Ffhdai3EgZ6JRxfZfNHfXLVJI95RKlmvthbwxo7vbXx6HqhpEiBNqMO6uIw9PHnNxVUbF%2BlCBaCXPFQuU3kOp4jFrSn9r6ey0qPZQ1alBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 1423
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd7bba50b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/ethXpancakeswap.png | 104.26.3.169 | 200 OK | 2.3 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/ethXpancakeswap.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 239 x 37, 8-bit colormap, non-interlaced Hash56426525974b5d92194de34304806141 0dd7fde921fd57b284d94f853d3a8a5e6129966c 4aaa56e07f671141b11389c5e932caba0e66a3419abfd6708e47314b227222e7
GET /web/banners/ethXpancakeswap.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: image/png
content-length: 2251
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "7425d15198d60bfd811e37fac809092b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lqVPfFnR5Tg1uw%2BLR8Abs61um9k1PmmRvhsV%2B9BXBrCKlh11A0CPXWc0ZYYDd74pZh7epL1%2BJKiETAjxZNIe3lrsz0CJ8OKCOVO%2FpvXLLc20CSEdWmSTPAKsFMRn9jz2yacAhle4JPLBvYNxBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 1542
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd7bba56b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 4.1 kB |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashe8d88b997cda9a7d061841a0571f015d 16b72b8f500448832d31d21a7afaf0d926daca59 faf1e460aa0364d68f646f36fcec936af28cf5031b2d28f9b906d62635383e2c
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 51
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:54 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/banners/v3LaunchBg.png | 104.26.3.169 | 200 OK | 29 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/v3LaunchBg.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 1190 x 384, 8-bit colormap, non-interlaced Hash92269a073a8ff6ff8165823bb78c8100 37e7ad871448c7c3e201ef0cce8ad0d770ecf216 17f4e07dc792045a22b2bdd97c7735e9c725d519abe6c091d128b4bb815e7a88
GET /web/banners/v3LaunchBg.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: image/png
content-length: 28803
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "bdb6f1758f282044cf73da0a07fc171d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pNXOAVFQQdx8oB9VK4i%2FqKx6IxlW%2FmwXw9DeqJAI1Larv7Wmdt2jeXHq%2BcVyNZ32RcpB8WTwuwngcDMsukY2AHHiChk1vu%2Fdi81qNgmYoLJDyR7adujT%2FvIvhSywamHnmfWE62yKUf6hPh%2FVRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd7bba66b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:20:55 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| api.thegraph.com/subgraphs/name/pancakeswap/pottery | 172.64.147.225 | 200 OK | 3 B |
URL OPTIONS HTTP/2api.thegraph.com/subgraphs/name/pancakeswap/pottery IP172.64.147.225:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectthegraph.com Fingerprint6B:E2:7C:AD:D8:69:7D:09:92:A6:9D:9D:C2:6D:25:DF:03:57:C5:AC ValidityFri, 19 Apr 2024 23:12:54 GMT - Thu, 18 Jul 2024 23:12:53 GMT
Hash344cb90c9cea24e3fd7d53c37a700afd 4460d93d41e542dbffba74b05bcfaf5bf88327d0 fa8b3050c745eb53dd2bea7ba537764269e8aca03015419f4a4327544640773a
OPTIONS /subgraphs/name/pancakeswap/pottery HTTP/1.1
Host: api.thegraph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:54 GMT
content-type: text/html; charset=utf-8
cf-ray: 8793fd771ea11c0a-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-headers: Content-Type, User-Agent
access-control-allow-methods: GET, OPTIONS, POST
set-cookie: __cf_bm=9S0OiJunDZW.OTchfF0LN.c9y2Mvz77FA3E8RaDxNEs-1713939654-1.0.1.1-4jNfyWEfAPLH7Z.1NmX8OXMdJLxW6eObgQCGw.pLeythRWH..yb6c_voMr4DEu48Krf8sKkvjzFvJ9jzRtbV_Q; path=/; expires=Wed, 24-Apr-24 06:50:54 GMT; domain=.thegraph.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/banners/liquidStakingBunnyBg1.png | 104.26.3.169 | | 0 B |
URL assets.pancakeswap.finance/web/banners/liquidStakingBunnyBg1.png IP104.26.3.169:0
CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/banners/liquidStakingBunnyBg1.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 24 Apr 2024 06:20:55 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ra198ZXX%2FoYm5zaC8vP8ryfWfcvkvyfNW6HUvdgwqK9SWg%2BGAvg8vqvLirs0hwdGf%2BtMsrlGbgAAgWuCmSBbPlSep%2FKzPNF9WpE8Lf%2FT7cHGmH%2Fi%2FztMDtlnDKw6Xzxp%2BSkIUlNFsNvf2d3mmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 8793fd7bba5eb4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/liquidStakingTitle.png | 104.26.3.169 | 404 Not Found | 0 B |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/liquidStakingTitle.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/banners/liquidStakingTitle.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 24 Apr 2024 06:20:55 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=geVEcAqHymyRis1rJfnnW0cBT%2B66w984xM3lZwf9jmIcgJ%2FFdjk%2F4hfO3meJvJmJejQ5FciXs0ln6p%2B13xtlG5whxJ%2BoXZUvuPIm976ShmhQ8%2FZOIKXxUmczveTIW5KU08wAeRH4lwO2HT5zgg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 8793fd7bba5bb4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/liquidStakingBunnyBg4.png | 104.26.3.169 | 404 Not Found | 0 B |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/liquidStakingBunnyBg4.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/banners/liquidStakingBunnyBg4.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 24 Apr 2024 06:20:55 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vV7Srzvs4bYfaXvbnhwTlKup2JOXIEZU0f5YdRCNMUdD5MTqM41P6pVgKjk2fOBdau15BF3cZnjzMP%2Bmrk3Drv2L9qQgXLKr1RUPBpi226mYmJtQPdDyPaGOnxT%2B%2BDqxhShXGk0UJ7D6Ozzlwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 8793fd7bba64b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/v3LaunchFlag.png | 104.26.3.169 | 200 OK | 13 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/v3LaunchFlag.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 307 x 367, 8-bit colormap, non-interlaced Hasha582a3aa3a0a6af730357027a4616582 97881734bd10ddf604789c2a83d257d758043fe6 8b7bd613b5e3c5485ddb5dc766a4c5a257617faff0c744d380ae043fdb3463a5
GET /web/banners/v3LaunchFlag.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: image/png
content-length: 12952
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "57ec66a4d86348768de7b814312a216e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jRKTZsqp67TuelEgt6KL6IQ%2BRbUglP3pOHG7wH2h%2FjfsFySASfWzN58W15oGwzf%2Bcmflqz9KWX9oFRv083LdpVYKC6f%2BUi5u8tLCwdm7WgMsYWVE%2B%2FIzTxwcq6GTQxy7iPSbKazUjB8gbEUCrA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd7bba70b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/pancakeProtectorBunny.png | 104.26.3.169 | | 35 kB |
URL assets.pancakeswap.finance/web/banners/pancakeProtectorBunny.png IP104.26.3.169:0
CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 387 x 466, 8-bit colormap, non-interlaced Hash138ebe6f31cf2d4d135814b13de1184d 92614dadb1e1d47b8e3d7382c9567936249e036c 4a5fa8c8f530db5fa505eec5256f3b1501bacfa1d6b20b9883d67b0d2734d5cc
GET /web/banners/pancakeProtectorBunny.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: image/png
content-length: 35417
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "10ee753282a475bea7a3b572800a62c4"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5DYkzRQaGNz0jM3n2lOlVfgIlNZgtGInuPyCjS8kcu79nhyoynstQaSKI5LbxCV%2FYiYjmq2qPYJhMk3AgeCYNY6B6tRqYny28hlKY%2F41UROFpXy3WAcBpSzIHfVAMxo2xkMV4nHGNnFpy1cAHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd7bba57b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/chains/4002.png | 104.26.3.169 | 404 Not Found | 0 B |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/4002.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/chains/4002.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 24 Apr 2024 06:20:55 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2FjrxBXzTigfpml9jGsKYd7dxAOPGyvik%2BPV%2FSFpQFMaC8rqxkFw8E2nOtVj1cDqjlqu2b0ccAeJ9%2Fq0A2YtTBWsamuZm%2BK9JtCtZVGYJfv%2Bk4QhrZWWvn9X%2BjK0PyO%2FhCa7mOKuSuDHjObVYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 8793fd7bba55b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/liquidStakingBunnyBg2.png | 104.26.3.169 | 404 Not Found | 0 B |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/liquidStakingBunnyBg2.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/banners/liquidStakingBunnyBg2.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 24 Apr 2024 06:20:55 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WFHEhLIAHZHCKEtaMizeCBA3R2bpoCsFHzUigLAiEUWgYThZpcSHo5wR1P1aalBfQ6Vzi83WJljc8ZhM2tHAImm1HRPZzYwM%2BHrEWyKwxNC%2BTKOTLI8awRma%2B9vtTPTvtAFNeWrSzgs7C0TuVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 8793fd7bba5fb4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/liquidStakingBunnyBg3.png | 104.26.3.169 | 404 Not Found | 0 B |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/liquidStakingBunnyBg3.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/banners/liquidStakingBunnyBg3.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 24 Apr 2024 06:20:55 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RFeocuWL9d0BsgevsqbCv9tmwYaf3nAE4lf3A%2FH00pJEmf%2F5sSyQ08NCvJ4%2FaVyOQCrPnK01R8dSi%2FxfJsCHO2%2FoGbtqTwDXl08EXRT7RCB4ZSavzEijwnazT6QMcJXeQlcMjeSvpL4HzZAlkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 8793fd7bba62b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/v3LaunchBnb.png | 104.26.3.169 | 200 OK | 12 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/v3LaunchBnb.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 409 x 248, 8-bit colormap, non-interlaced Hashf56d81fd5c85dc6b5429dc62635eff98 b86bca4bae00c7068891f45677ac85b85e22a793 4cda36e45c29b1a6773576fcedc859a9d5298d268543f726a3223a89e25dafa3
GET /web/banners/v3LaunchBnb.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: image/png
content-length: 11932
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "e0425b2c80cab78a1c2b8bb89264fa52"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=49Amtqwe6ucQAkJdvmxjqpkvUTFBq5nQNabPEToT6OkzC1fxwh2SZEPF2UwTHorb%2BC6c0%2F7eIkuC1AFVd12%2FqwIAeUsM4iQXHU4ZhzIFjOltDIeB6S%2BerCFJsxBW%2FFRBT%2Blv0%2FSPf62rL%2FW9kQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd7bba6db4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/v3LaunchEth.png | 104.26.3.169 | 200 OK | 12 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/v3LaunchEth.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 436 x 369, 8-bit colormap, non-interlaced Hasha46d6efd0211e55001acded4c6115d69 9e54cb823c16adf03143c59428683a48af410b7f a3d821eced83d123cd8612b6bc714e85e02b8f0d84fb66fd726e483565ded45b
GET /web/banners/v3LaunchEth.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: image/png
content-length: 11598
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "97b665170e6a85ecd54a4116bcbb3d13"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S2f2GQd2DI1lxSo9YghdF3OcDF18jxB2JMYWpLWEPNxDyd3pxbwzuIIeM9i2aK2a%2Flw14sw95oLJkajjI8Qudl8oagWGYVBrmc%2BxQIV9svGT120JB0UaQ2bX9ZrVG3PuUiWMPsbsK5dxRpsKDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd7bba6fb4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/farmV3MigrationBunny.png | 104.26.3.169 | 200 OK | 53 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/farmV3MigrationBunny.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 316 x 236, 8-bit/color RGBA, non-interlaced Hash1d1325a5730df6b0f0b1a3e59890bc4e 9a8adb203a385947f6e9ce6458bdf22b271c5449 d9acbffae65bc4ae8fefecb2f8f93277ad217acee2030a26e2232e63e7a2ea66
GET /web/banners/farmV3MigrationBunny.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: image/png
content-length: 53134
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "f21f596bf11519181e3f3423283355d8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wh9sc1cu8qgj28Wh4YiaTUBC6K2geKqfSijcxpjK88ympK01d7DezSf5FWJYcw5tWeDyD5mK7L0txh3014XJzd38%2FA8bTltUccVvm9EBoFwiZpGhU4kuUEU%2BBvauNsrkR71OcN7MxmVaM9jQ1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd7bba72b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/ETHBunny.png | 104.26.3.169 | | 268 kB |
URL assets.pancakeswap.finance/web/banners/ETHBunny.png IP104.26.3.169:0
CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 2252 x 526, 8-bit/color RGBA, non-interlaced Size268 kB (268453 bytes) Hash86b0b7802a65c31f14244dfb3a3c9fa9 9658e1d22333401a7589d88eadb34593fdc05a23 10ee1bb7d9ebddfdeddca0747956e9a9a71b17775a32808bea9c90a5ff698ea6
GET /web/banners/ETHBunny.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: image/png
content-length: 268453
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "acfa50f5d5e161000baf4e3765b3035c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SUzfsfX2cldK1qHZxk1c5lLQlnW4Wj6YNZxqnSDyD2QQhy5z6wmtl5EfjTi%2FoQ2GxjLb86BcED2R2vnD7b%2F7tvFlRb1LfFpYOnX%2Fz1SjgX1MoIY7YJXGvEdPBlVT0IXvV0B4CnApS2C3%2FHZPcg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd7bba73b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt0clVKZzlZQ1drRkc4bUtLUlJCZXFWMWM2OXQ3QWJKTFZFWXFYWWlOUlpGcSIsInN1YiI6IjU3MjhiZTM0NDEzZGYyMjZmM2FkODZhODE2NjI1OGIxNzUzNGM0MTZjOWEwYzkyZTU3NmMxNzYyNGZjZGM0MTciLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzkzOTY1NCwiZXhwIjoxNzE0MDI2MDU0fQ.lzaV2uGW4IW31DOI47jp5wbedSlLg5ueNFRSJH9BuhcDIiR3gMBvIrMlrwQyvXKSIYFAni4ncqzEnruJiicqDw&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true |  3.126.230.177 | | 0 B |
URL relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt0clVKZzlZQ1drRkc4bUtLUlJCZXFWMWM2OXQ3QWJKTFZFWXFYWWlOUlpGcSIsInN1YiI6IjU3MjhiZTM0NDEzZGYyMjZmM2FkODZhODE2NjI1OGIxNzUzNGM0MTZjOWEwYzkyZTU3NmMxNzYyNGZjZGM0MTciLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzkzOTY1NCwiZXhwIjoxNzE0MDI2MDU0fQ.lzaV2uGW4IW31DOI47jp5wbedSlLg5ueNFRSJH9BuhcDIiR3gMBvIrMlrwQyvXKSIYFAni4ncqzEnruJiicqDw&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true IP3.126.230.177:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt0clVKZzlZQ1drRkc4bUtLUlJCZXFWMWM2OXQ3QWJKTFZFWXFYWWlOUlpGcSIsInN1YiI6IjU3MjhiZTM0NDEzZGYyMjZmM2FkODZhODE2NjI1OGIxNzUzNGM0MTZjOWEwYzkyZTU3NmMxNzYyNGZjZGM0MTciLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzkzOTY1NCwiZXhwIjoxNzE0MDI2MDU0fQ.lzaV2uGW4IW31DOI47jp5wbedSlLg5ueNFRSJH9BuhcDIiR3gMBvIrMlrwQyvXKSIYFAni4ncqzEnruJiicqDw&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true HTTP/1.1
Host: relay.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5YLqWwSKGOdRn11jv+MfGg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
connection: upgrade
upgrade: websocket
sec-websocket-accept: VVT743LQUZHFeECDW632/uO7eJ4=
date: Wed, 24 Apr 2024 06:20:54 GMT
|
|
| assets.pancakeswap.finance/web/banners/v3LaunchBunny.png | 104.26.3.169 | 200 OK | 26 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/v3LaunchBunny.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 443 x 509, 8-bit colormap, non-interlaced Hash8a6660bfcc96958b6918d5870c7342ce 97819e4da9222b29a5cfe18a6d10dd39f6b5fc22 80e4ef968c519cd7f263135601ff24fbecf5388dd66e5f9519dc99e28819c9ba
GET /web/banners/v3LaunchBunny.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: image/png
content-length: 25587
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "349a179e6031543cee2cd0ebd422188d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=16I6G7S06P%2BQXb8XWqSSV5KSSlA2dIndQWZZ3Ou4V9z1fizp%2FcRuIhhx66DfieXz8zwl6xo4MTgCntPiKhHVJ7q5sy%2FspbZwjbdGdtftKHHB47Ry475WqTizT%2BL7gysqY4ruZcQLj8I8qeIR0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd7bba69b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/banners/pancakeProtectorBg.png | 104.26.3.169 | 200 OK | 266 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/pancakeProtectorBg.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 2252 x 384, 8-bit colormap, non-interlaced Size266 kB (266185 bytes) Hash6d3fefc356e316b4cee5cce7da022428 6b499cbb2aa7a731c5018e291a677eba0a453cec 7d35c95cec473a40bc20a7fcf45bfa55e09deee82e6f0b4bcf78543ba30d5c0a
GET /web/banners/pancakeProtectorBg.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: image/png
content-length: 266185
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "6165c592e7eda7c605d1e53ec563f3b8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=slVrqBLXYAOoqrbyRDRzuOpDbiQmDd5SZL%2FO6vRYyAGDdoZE%2FmHTRuVSGMF41gRnYcsfdq%2FDbg5SRqgWmAZTFm%2Bu7QolYuMyim4jTfwWqUAQvmyBJEGlv7rddx%2BPVqgjDoAEvwYaEHsZm%2BEnrA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd7bba58b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aptos.pancakeswap.finance/images/apt.png | 172.67.75.76 | | 808 B |
URL aptos.pancakeswap.finance/images/apt.png IP172.67.75.76:0
File typePNG image data, 72 x 72, 8-bit colormap, non-interlaced Hash74168d688d61e90d33aa8c00dbc38d76 9dba71d2bd1ae649f81a36a966faad7049cf705a 260092dadbeeabbf5bc49e2cec9342dcdc2e0a561d9dc24cb290eab6021ec7b4
GET /images/apt.png HTTP/1.1
Host: aptos.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: image/png
content-length: 808
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="apt.png"
etag: "74168d688d61e90d33aa8c00dbc38d76"
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/apt.png
x-vercel-cache: HIT
x-vercel-id: arn1::mf2g5-1713473669513-e69b264488af
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h4lODyy%2FvCt8TNcdgXlNjf76OdIy%2B3bkHc3lcb2TVPjwBaUJyqIGKqiOj7flgiag8aJXj3JLirw1triPibjDV%2FoBI3aqGKu9kJG2V0fSokaYmxRlfhgK%2Bffoiby9wzWKAKtf94W%2FJ%2BLsZjQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd7c2adcb511-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/media/galxe-logo.7705eef0.png | 76.76.21.241 | | 12 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/media/galxe-logo.7705eef0.png IP76.76.21.241:0
File typePNG image data, 1532 x 280, 8-bit gray+alpha, non-interlaced Hashc92c83915e160dccf4f32e399aabe7e1 8e333f02c2dcff57e870522c1396dd5919a0d4f8 9d00bf2f828acafb416f25122b46d9d4d9b46dd436176fbbfc9a5e1b4959a97b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/galxe-logo.7705eef0.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="galxe-logo.7705eef0.png"
content-type: image/png
date: Wed, 24 Apr 2024 06:20:55 GMT
etag: "c92c83915e160dccf4f32e399aabe7e1"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/media/galxe-logo.7705eef0.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qpdmr-1713939654997-06d8eade25f5
content-length: 12004
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/decorations/phishing-warning-bunny.webp | 76.76.21.241 | | 4.9 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/decorations/phishing-warning-bunny.webp IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hashc73199f7cfd8a30afa8182b0b5d9e2e5 52a839df66e697b6a63c609fc3f978bf43b5edae bae96bf0ec8c48d43751e0a3be260ce9c57feaf129b80f6e6dea7f1612c8dd39
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/decorations/phishing-warning-bunny.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 0
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="phishing-warning-bunny.webp"
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:55 GMT
etag: "c73199f7cfd8a30afa8182b0b5d9e2e5"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/decorations/phishing-warning-bunny.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::btclf-1713939654993-c809ba7e6b49
content-length: 4850
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/media/polygon-zk-bg.67d7dcaf.png | 76.76.21.241 | | 253 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/media/polygon-zk-bg.67d7dcaf.png IP76.76.21.241:0
File typePNG image data, 2252 x 384, 8-bit/color RGBA, non-interlaced Size253 kB (252838 bytes) Hash3b932c9b431ef4b3fb7a8983163799c0 1db3b77d840486a7155e526b8102eca25c242d46 cd9cb08d0f1971ac568c2e0a4d178e46606a6da517d01ce0ebaded0aaa835b13
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/polygon-zk-bg.67d7dcaf.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="polygon-zk-bg.67d7dcaf.png"
content-type: image/png
date: Wed, 24 Apr 2024 06:20:55 GMT
etag: "3b932c9b431ef4b3fb7a8983163799c0"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/media/polygon-zk-bg.67d7dcaf.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::njzdx-1713939654995-c593dad60de0
content-length: 252838
X-Firefox-Spdy: h2
|
|
| relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtnRktFSnFhTGduTUxUQ21zakJnMWk0cjF6aUJuMU5lOEx6Q3docWpOS1Y3MSIsInN1YiI6IjI4ZmFmMDJjMjVkMTM4ZDRkZjhkNjkxZDBjOGYxYzA0OTkzNGUwYjE0Y2QzMjc0NDk0YzQ5ZjlmOGJlOWIxNGEiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzkzOTY1NCwiZXhwIjoxNzE0MDI2MDU0fQ.ZH5wXC6tHlcq01e5gyJ8235ThtubajD4HhgAel3Ai2kWeaUDnHoKx7b3npoXhXyalvCBZkFvMUkxTUGzbfafCA&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true | 18.159.147.43 | | 0 B |
URL relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtnRktFSnFhTGduTUxUQ21zakJnMWk0cjF6aUJuMU5lOEx6Q3docWpOS1Y3MSIsInN1YiI6IjI4ZmFmMDJjMjVkMTM4ZDRkZjhkNjkxZDBjOGYxYzA0OTkzNGUwYjE0Y2QzMjc0NDk0YzQ5ZjlmOGJlOWIxNGEiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzkzOTY1NCwiZXhwIjoxNzE0MDI2MDU0fQ.ZH5wXC6tHlcq01e5gyJ8235ThtubajD4HhgAel3Ai2kWeaUDnHoKx7b3npoXhXyalvCBZkFvMUkxTUGzbfafCA&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true IP18.159.147.43:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtnRktFSnFhTGduTUxUQ21zakJnMWk0cjF6aUJuMU5lOEx6Q3docWpOS1Y3MSIsInN1YiI6IjI4ZmFmMDJjMjVkMTM4ZDRkZjhkNjkxZDBjOGYxYzA0OTkzNGUwYjE0Y2QzMjc0NDk0YzQ5ZjlmOGJlOWIxNGEiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzkzOTY1NCwiZXhwIjoxNzE0MDI2MDU0fQ.ZH5wXC6tHlcq01e5gyJ8235ThtubajD4HhgAel3Ai2kWeaUDnHoKx7b3npoXhXyalvCBZkFvMUkxTUGzbfafCA&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true HTTP/1.1
Host: relay.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: K0Wcq5ZwbCTSHk1B7hmivw==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
connection: upgrade
upgrade: websocket
sec-websocket-accept: KH06OiRlVhzexGR1iC35RdKvvoA=
date: Wed, 24 Apr 2024 06:20:54 GMT
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/media/galxe-traverse-bg.7ac0b1a7.png | 76.76.21.241 | 200 OK | 756 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/media/galxe-traverse-bg.7ac0b1a7.png IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 2252 x 384, 8-bit/color RGBA, non-interlaced Size756 kB (755710 bytes) Hashd36ba3799c999d755689fcd43080fced cee20cc1f8f2a8ddba5d75543d298d7772485080 0b36a0e207ecbfad3c573316693d92422e27fa67764db2838c15f9ccd65a5cb4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/galxe-traverse-bg.7ac0b1a7.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="galxe-traverse-bg.7ac0b1a7.png"
content-type: image/png
date: Wed, 24 Apr 2024 06:20:55 GMT
etag: "d36ba3799c999d755689fcd43080fced"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/media/galxe-traverse-bg.7ac0b1a7.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::tntgm-1713939654997-15c6f4da0459
content-length: 755710
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fperpetual.fd0aa080.png&w=640&q=75 | 76.76.21.241 | | 67 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fperpetual.fd0aa080.png&w=640&q=75 IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hash8786fd09256232745f02507abf7965a2 e620ffd24bf12ae3a1720b3c398c67ac1e40d1bf e736ad221fd05555c9488328ae3b8826ac2140370c3ed53ed334c1e4312ceed9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fperpetual.fd0aa080.png&w=640&q=75 HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1840718
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="perpetual.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:55 GMT
last-modified: Tue, 02 Apr 2024 23:02:17 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/perpetual.fd0aa080.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cq68b-1713939655008-d9f5fcb2795b
content-length: 66684
X-Firefox-Spdy: h2
|
|
| coins.llama.fi/prices/current/bsc:0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c,bsc:0x55d398326f99059fF775485246999027B3197955,bsc:0xe9e7CEA3DedcA5984780Bafc599bD69ADd087D56,bsc:0x2170Ed0880ac9A755fd29B2688956BD959F933F8 | 104.22.55.70 | | 8.8 kB |
URL coins.llama.fi/prices/current/bsc:0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c,bsc:0x55d398326f99059fF775485246999027B3197955,bsc:0xe9e7CEA3DedcA5984780Bafc599bD69ADd087D56,bsc:0x2170Ed0880ac9A755fd29B2688956BD959F933F8 IP104.22.55.70:0
File typegzip compressed data, from Unix Hash55be765bbf5d33b6c2177466a0d6a290 d6a06831d07d2a82b358a6d76940ef95215bed05 b1108b08e343f66549e7a9e197f5b1981e8e39d854d580d113676393f9bff36a
GET /prices/current/bsc:0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c,bsc:0x55d398326f99059fF775485246999027B3197955,bsc:0xe9e7CEA3DedcA5984780Bafc599bD69ADd087D56,bsc:0x2170Ed0880ac9A755fd29B2688956BD959F933F8 HTTP/1.1
Host: coins.llama.fi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:54 GMT
content-type: application/json
x-amzn-requestid: f8d23142-08be-463c-9a45-1a67f443d628
access-control-allow-origin: *
x-amz-apigw-id: Wt6p2FCPFiAEYBQ=
expires: Wed, 24 Apr 2024 06:25:20 GMT
x-amzn-trace-id: Root=1-6628a4a5-275f49f821cbf5d46e53ab52
access-control-allow-credentials: true
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Nioc0_3HaJCvWt85Obtr6r5yYB8wGMSYfnyDGyb8P7_BjtD7UPEEtA==
cf-cache-status: MISS
last-modified: Wed, 24 Apr 2024 06:20:54 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd785fbb56ba-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:20:55 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Flove-butter.28a011a7.png&w=256&q=75 | 76.76.21.241 | 200 OK | 6.1 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Flove-butter.28a011a7.png&w=256&q=75 IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash69289d8d5137e2284184c075f71883f7 309f421019489d7084eef810fbeac37ffc4c29f4 54a6580f096d0d5aebe1018bf7b1ce300c934cfa56fdc7fcaf046f60e385fdf7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Flove-butter.28a011a7.png&w=256&q=75 HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1840718
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="love-butter.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:55 GMT
last-modified: Tue, 02 Apr 2024 23:02:16 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/love-butter.28a011a7.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::mx86h-1713939655005-907c004ab7fa
content-length: 6118
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fgalxe-traverse-cloud.c229b8c9.png&w=256&q=75 | 76.76.21.241 | | 4.9 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fgalxe-traverse-cloud.c229b8c9.png&w=256&q=75 IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hashc451945f4030f10cc84623fb1ae845b3 9f9a0cd6a44675c8f6a3aa487d19e381921e3d47 9622a88167a4e9ed1be4cc9aa9e6a1cba1d2205f5dfd0fdc91f34cd889bb7d70
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fgalxe-traverse-cloud.c229b8c9.png&w=256&q=75 HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1938201
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="galxe-traverse-cloud.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:55 GMT
last-modified: Mon, 01 Apr 2024 19:57:34 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/galxe-traverse-cloud.c229b8c9.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::btclf-1713939654998-67c91e74be3c
content-length: 4918
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fbutter.45e9bddc.png&w=96&q=75 | 76.76.21.241 | 200 OK | 4.4 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fbutter.45e9bddc.png&w=96&q=75 IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashc121e50348a34f30c4a6b3f0b339345a f57602e41ae63e4018558d4f0bfc7fe319e948fe 61ba73b76e88361c30715d5c482422aa991c6aecbb747310e71c0b4b46f8e053
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fbutter.45e9bddc.png&w=96&q=75 HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1938200
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="butter.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:55 GMT
last-modified: Mon, 01 Apr 2024 19:57:34 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/butter.45e9bddc.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::2lpp7-1713939655003-59470f9b0893
content-length: 4446
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fgalxe-traverse-bunny.2eec4362.png&w=384&q=75 | 76.76.21.241 | | 15 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fgalxe-traverse-bunny.2eec4362.png&w=384&q=75 IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hash8afcec56007f78d2db6985c23d63b1da b9371f6d56506cf96576f3e4d5bfdeffdd28e615 b1410c8913372283f6c2c0d60354d862c2ca1c4d922beb593179fcde3127fce5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fgalxe-traverse-bunny.2eec4362.png&w=384&q=75 HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1938200
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="galxe-traverse-bunny.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:55 GMT
last-modified: Mon, 01 Apr 2024 19:57:34 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/galxe-traverse-bunny.2eec4362.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::hsp2k-1713939654998-f1e50a99e9c6
content-length: 14806
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fbutter-2.36a9d3e5.png&w=96&q=75 | 76.76.21.241 | | 3.9 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fbutter-2.36a9d3e5.png&w=96&q=75 IP76.76.21.241:0
File typeRIFF (little-endian) data, Web/P image Hash5a5bd0a29e2af67f55c23a4c5a3fd363 cdd9a451d4ef6baf8ccec971607a6572b94cdad9 920ada32a64d008d384d78a314c8dbcc45aae9019bf542f8a0050d0cc45d1e02
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fbutter-2.36a9d3e5.png&w=96&q=75 HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1840718
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="butter-2.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:55 GMT
last-modified: Tue, 02 Apr 2024 23:02:16 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/butter-2.36a9d3e5.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::8zhxf-1713939655005-b139caad96bc
content-length: 3884
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Ftrading-reward-bunny.8fd08b80.png&w=256&q=75 | 76.76.21.241 | 200 OK | 11 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Ftrading-reward-bunny.8fd08b80.png&w=256&q=75 IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashdbe67b706df501ae166e8e8a4cc45f12 221aec7855460193cb50d6d3ea53bc2c605ee7cd 4a87fa1d79557530867ed344b51bb1f58ecda0dd4b0fc62166dd42f084bd47e6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Ftrading-reward-bunny.8fd08b80.png&w=256&q=75 HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1895054
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="trading-reward-bunny.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:55 GMT
last-modified: Tue, 02 Apr 2024 07:56:40 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/trading-reward-bunny.8fd08b80.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::6m4hn-1713939654999-5b8b138d08ca
content-length: 11024
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/worker-chunks-ed675b153cc8567b.js | 76.76.21.241 | 200 OK | 253 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/worker-chunks-ed675b153cc8567b.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size253 kB (253346 bytes) Hash33d9bbcbcef3a9304bc8bcd2a6c9cecb c3c9e58d36f1aad04dba2b03204b4cb0ef29b334 7fd9ce983f68bb663f6064458935dfd3af549941887c4a93a6085da7e4959592
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/worker-chunks-ed675b153cc8567b.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 554947
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="worker-chunks-ed675b153cc8567b.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:54 GMT
etag: W/"33d9bbcbcef3a9304bc8bcd2a6c9cecb"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/worker-chunks-ed675b153cc8567b.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::62wz8-1713939654995-facd9931aa9d
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fpolygon-zk-bunny.a0b3c2dd.png&w=384&q=75 | 76.76.21.241 | 200 OK | 15 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fpolygon-zk-bunny.a0b3c2dd.png&w=384&q=75 IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hash79f4e6efaab4b55ed07ae2a09ae7a37c f0a6145c164962adcf0714137eb58a7e37fff7b0 d8b4267fe6ec67cf8d4a462cb1bbcf4f9444c8be3b05cccdabd6702984bdbe87
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fpolygon-zk-bunny.a0b3c2dd.png&w=384&q=75 HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1938201
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="polygon-zk-bunny.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Wed, 24 Apr 2024 06:20:55 GMT
last-modified: Mon, 01 Apr 2024 19:57:34 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/polygon-zk-bunny.a0b3c2dd.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::kht88-1713939654998-9624f1ad316c
content-length: 15134
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:20:55 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| www.walletlink.org/rpc | 172.64.150.248 | | 0 B |
IP172.64.150.248:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rpc HTTP/1.1
Host: www.walletlink.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: /ufViFWL+rR12op68jfzBQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Wed, 24 Apr 2024 06:20:55 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Ve3F2oNVxzk1RnoWBzty+NTZC3Y=
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=Ak.S9j61J9ipp_Jp5qXguKsDVbM16g0rqBmCtfxgfU4-1713939655-1.0.1.1-FQyaUiafvGo03bKIGbxDAHd3WD.ZlLwXZRPvZ5.36BU9t54FkgKbU5Ymyk6ksT0RNUj4KmZ_.o2dW7V96WAqJA; path=/; expires=Wed, 24-Apr-24 06:50:55 GMT; domain=.walletlink.org; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 8793fd7c5e71b512-OSL
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4568.796287f6c5d648ca.js | 76.76.21.241 | 200 OK | 122 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4568.796287f6c5d648ca.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size122 kB (121770 bytes) Hash64d5b55a7f111087b544cf4b0184342e 35b50a5dc5480a08260d268b607863b4bfed23c8 ca53a6b9c69209f3131643e0f774fd9a98553247d75c104043aa6c318b083843
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4568.796287f6c5d648ca.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 6419
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4568.796287f6c5d648ca.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:55 GMT
etag: W/"64d5b55a7f111087b544cf4b0184342e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4568.796287f6c5d648ca.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::mx86h-1713939655275-4f4679700d54
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:20:55 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| hub.snapshot.org/graphql | 104.26.12.125 | 204 No Content | 0 B |
IP104.26.12.125:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjecthub.snapshot.org Fingerprint51:92:07:17:6E:EC:8E:CB:EB:58:16:46:A8:FD:FD:5C:48:F4:F4:69 ValiditySat, 30 Mar 2024 23:28:55 GMT - Fri, 28 Jun 2024 23:28:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /graphql HTTP/1.1
Host: hub.snapshot.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:20:56 GMT
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: content-type
access-control-max-age: 86400
x-do-app-origin: 9134fcd0-e6bb-11ec-b1dc-0c42a19a82a7
cache-control: private
x-do-orig-status: 204
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k7vMZ22k%2FwFTsj%2FB358Uv2Ib3dz%2Fb%2BITy4oqQlkKT%2BZINytuiOCjuHvDpJ1fF5vS0ZxHUKtRdVgQR9LvGdQxEVIZJ8UG0lNYPqHh0Nk2rfTwMCd%2BmeGyczIFhye9pRPctfI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793fd818ca3568b-OSL
X-Firefox-Spdy: h2
|
|
| hub.snapshot.org/graphql | 104.26.12.125 | 204 No Content | 25 B |
IP104.26.12.125:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjecthub.snapshot.org Fingerprint51:92:07:17:6E:EC:8E:CB:EB:58:16:46:A8:FD:FD:5C:48:F4:F4:69 ValiditySat, 30 Mar 2024 23:28:55 GMT - Fri, 28 Jun 2024 23:28:54 GMT
Hashcdc8512ced83004a90115850c9b5608b b6eb57230b2dc1f0e7ba40ab793e36bda69eed09 699671a256296a7dda710792eb11c9dc11bb7087387f2ef3057e17e5e669cda4
POST /graphql HTTP/1.1
Host: hub.snapshot.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
content-type: application/json
Content-Length: 630
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:56 GMT
content-type: application/json; charset=utf-8
content-length: 25
access-control-allow-origin: *
ratelimit-policy: 100;w=60
ratelimit-limit: 100
ratelimit-remaining: 98
ratelimit-reset: 59
etag: W/"19-tutXIwstwfDnukCreT42vaae7Qk"
x-do-app-origin: 9134fcd0-e6bb-11ec-b1dc-0c42a19a82a7
cache-control: private
x-do-orig-status: 200
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=73pXpdGjD502miXbOFGKxQUaEz1oVgb7iorWm%2FCGu4%2FNXVi7xyIPKXExS0Fe1C4cj7VP%2Fu2Jc4mh5k2UoEHG0R3UkD61CMecyU1KbOLM8aVi%2Bpp7OTMIw6wOe2b1hUdmevk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793fd827d47568b-OSL
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:20:56 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:20:56 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js | 76.76.21.241 | 200 OK | 3.9 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (11903) Hash4af0d04550602a4e4023aae8ef321f77 78e4304151cad34afe52345efeb22cdb312c879c 1669b1d79728b734d369c85406cfa634f6455c3487057db9c9a95d47335693aa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8940-2680582ce3921897.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 6420
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8940-2680582ce3921897.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"4af0d04550602a4e4023aae8ef321f77"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8940-2680582ce3921897.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::47nm6-1713939656357-09422d22260e
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/coingecko.json | 104.26.2.169 | 200 OK | 203 kB |
URL GET HTTP/2tokens.pancakeswap.finance/coingecko.json IP104.26.2.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
Size203 kB (203190 bytes) Hash673965b6556700be8d3c7105f2a03496 d74c5b35696acfcb7cf6ed9212ce4ba324c5a4e6 d5133c0149ef7808524b66f05491b2da4ef89836c6a16cfa614331692cd80129
GET /coingecko.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"81100cc9c19adfcbcf54037522e7e657"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vWjLBNa%2Bp%2B5DAhULBh4gVlbWHlv0GOS1o9BSWLYfFBR30mkQhYDGD1P%2FJJRrY9XGfmzmHXEpbjUFx36K4p8e4e4gQjPYzDVKC9ynOvttVC%2BxtT5gIhYuMd1CytrSXOj572CM7OuD9YqB0SuLtA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8793fd7dcf0ab4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:20:57 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:20:57 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1978-e2ac2c2e731961b2.js | 76.76.21.241 | 200 OK | 6.1 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1978-e2ac2c2e731961b2.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (2266) Hashaa17dba3c6bb132a0184dab2c3711b02 fe901e0a57bc68163662a90cfabc28a03e5bb4e8 9287c2d5c8c36d8453d96be82de48fa1d1333f6d7094df460cd37f6de934f527
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1978-e2ac2c2e731961b2.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 6417
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1978-e2ac2c2e731961b2.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"aa17dba3c6bb132a0184dab2c3711b02"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/1978-e2ac2c2e731961b2.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cq68b-1713939656657-bc75c29070f3
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/fbd441cc-e861-46dc-48ae-a04228ddb500?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 9.7 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/fbd441cc-e861-46dc-48ae-a04228ddb500?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image Hash2c5be8f0d595a9248edba92d0419c9a7 422f1ca635998f8cdaeec9e7b37e200d0d5842ea 9584c8da5e38495a93fa58ed0efe855fd33a41aa972bcd33ad1d867828964517
GET /w3m/v1/getWalletImage/fbd441cc-e861-46dc-48ae-a04228ddb500?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:57 GMT
content-type: image/webp
content-length: 9660
cf-ray: 8793fd8c08ad569c-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 43791
cache-control: public, max-age=31536000
etag: "cfFJ943IWAd-AliTnsJ2QbJY_MUG7FeV1c8ZwDJoU7DQ"
expires: Thu, 24 Apr 2025 06:20:57 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=17+0 c=5+23 v=2024.4.0 l=9660
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=gVP7i9BZy5LbzCgKIs47t5yf20y1zhd5K70jwQXKXWM-1713939657-1.0.1.1-MufzK_x49.GISBoOC9yJ1xuQL1KqR_wQN0283RzEqzLPvADGxtbQWTxIkGmur1QFpPuts1pZVQZvJdZNQMAAjg; path=/; expires=Wed, 24-Apr-24 06:50:57 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js | 76.76.21.241 | 200 OK | 55 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (11903) Hash4af0d04550602a4e4023aae8ef321f77 78e4304151cad34afe52345efeb22cdb312c879c 1669b1d79728b734d369c85406cfa634f6455c3487057db9c9a95d47335693aa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8940-2680582ce3921897.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 6419
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8940-2680582ce3921897.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:55 GMT
etag: W/"4af0d04550602a4e4023aae8ef321f77"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8940-2680582ce3921897.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939655232-2cf17dacb3a8
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/6074-142cf53623178492.js | 76.76.21.241 | 200 OK | 22 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/6074-142cf53623178492.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (7862) Hashe5b6187761df30c4fb5bfa3174d5d3cd 23401999d77ea9f407c0f5f3aa8966e5ac4c6f20 e6d19d72140ab70e8aac44b134148e1ea1fa307c4aec7b3feee9cdfe575a10fb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6074-142cf53623178492.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="6074-142cf53623178492.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"e5b6187761df30c4fb5bfa3174d5d3cd"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/6074-142cf53623178492.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::8zhxf-1713939656654-530a052f3b8f
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1866-e72e60159ba8eed1.js | 76.76.21.241 | 200 OK | 13 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1866-e72e60159ba8eed1.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (5640) Hash87db549cda1723529f9dd114926526b8 228404ee3857db527e42152b0f6c5c456bb2c322 648171548c3f43a03fd1e2686905dee45c048aa70640c61cd67a4c456d4a5ad7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1866-e72e60159ba8eed1.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 6417
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1866-e72e60159ba8eed1.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"87db549cda1723529f9dd114926526b8"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/1866-e72e60159ba8eed1.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::czcxr-1713939656601-3fa5bce96c31
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 2.6 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image Hashd62bfd6a0d4e300d8e50b60fbe10eab0 251de0bd2dba5194b0dc337e371b017f673d2b40 9407c0251bd7b695a38698d04bbb15514ed472e11797aef7793b9acb2b04fcff
GET /w3m/v1/getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:57 GMT
content-type: image/webp
content-length: 2632
cf-ray: 8793fd8c18b2569c-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 43791
cache-control: public, max-age=31536000
etag: "cfmeYviP6kCNFgjEWLRBgPUJnDUG7FeV1c8ZwDJoU7DQ"
expires: Thu, 24 Apr 2025 06:20:57 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=14+0 c=0+17 v=2024.4.0 l=2632
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=tOPskcELVsULv6GQe37SQGznRG_8orN6n2XRGQaj5Kw-1713939657-1.0.1.1-cTov11CB5Ss0NMO_WbJGybPMQ4gItj8Brlv4BIzmRXaTjGONPanxq5aEZgykVUH4waGjCnGYQLdmXj15Ypl6aw; path=/; expires=Wed, 24-Apr-24 06:50:57 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js | 76.76.21.241 | 200 OK | 8.9 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (11903) Hash4af0d04550602a4e4023aae8ef321f77 78e4304151cad34afe52345efeb22cdb312c879c 1669b1d79728b734d369c85406cfa634f6455c3487057db9c9a95d47335693aa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8940-2680582ce3921897.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 6419
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8940-2680582ce3921897.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:55 GMT
etag: W/"4af0d04550602a4e4023aae8ef321f77"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8940-2680582ce3921897.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::njzdx-1713939655231-c4c20487c12f
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/9f259366-0bcd-4817-0af9-f78773e41900?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 7.2 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/9f259366-0bcd-4817-0af9-f78773e41900?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image Hash342152b7fdcb21b38fb77d6b55dab77b c98e9cc318eef9dbe98df17fe6c3afc699dbee33 a1962f56716c3fc8e93e593dd611f7b45a8632bacf8df45b56f9dcc5b3c10958
GET /w3m/v1/getWalletImage/9f259366-0bcd-4817-0af9-f78773e41900?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:57 GMT
content-type: image/webp
content-length: 7170
cf-ray: 8793fd8c18bd569c-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 43791
cache-control: public, max-age=31536000
etag: "cftQTt3un0HlQqBazMK6bKNWLiUG7FeV1c8ZwDJoU7DQ"
expires: Thu, 24 Apr 2025 06:20:57 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=711+0 c=2+36 v=2024.4.0 l=7170
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=0pBz3zjAngE6z.2ZqDoZhDYkr.5OmbndcvQElAQNi.4-1713939657-1.0.1.1-o5RmGm0odwknpmUGOo0Xbaz5EMKD_gHVunAKhAGzjxdqc90jcvOVLszQFg7jjJpHSgdNtH0eRgk8riGM8OMupg; path=/; expires=Wed, 24-Apr-24 06:50:57 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4861-3efb5f77e6bf6644.js | 76.76.21.241 | 200 OK | 14 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4861-3efb5f77e6bf6644.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (14258) Hash2e5f13e529de38f4c7a898034d048c61 de7104d674d9ae064d85726165f7b8eb14ed28b1 64cee8b66ce8ba35aefd2b129fd35cb40711119d777a296802ffcfff6e6e68cb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4861-3efb5f77e6bf6644.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 6417
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4861-3efb5f77e6bf6644.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"2e5f13e529de38f4c7a898034d048c61"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4861-3efb5f77e6bf6644.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::czcxr-1713939656606-c498501c1ba9
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1972-9e91c3e6853df63a.js | 76.76.21.241 | 200 OK | 4.7 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1972-9e91c3e6853df63a.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (12206) Hashf48d620de69ab88820f7e9e05ae9500a 0361e49e3be4effe80f3c3ad796035641f38b286 5430085c62aed6e8a0f531b6ef9b0903f49c4b59ff23b07113c537b40b87f331
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1972-9e91c3e6853df63a.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 6417
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1972-9e91c3e6853df63a.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"f48d620de69ab88820f7e9e05ae9500a"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/1972-9e91c3e6853df63a.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qpdmr-1713939656586-1327b06c9b23
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:20:57 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:20:59 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| pancake-trading-fee-rebate-api.pancakeswap.com/api/v1/campaign/status/0/type/rb | 76.76.21.61 | 500 Internal Server Error | 56 B |
URL GET HTTP/2pancake-trading-fee-rebate-api.pancakeswap.com/api/v1/campaign/status/0/type/rb IP76.76.21.61:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancake-trading-fee-rebate-api.pancakeswap.com FingerprintA5:FC:37:2C:1A:5E:1C:05:39:EA:D0:56:25:28:0B:6C:A7:EF:C0:F3 ValiditySun, 31 Mar 2024 15:51:36 GMT - Sat, 29 Jun 2024 15:51:35 GMT
Hash2b6bca77cf7ed26b3abb200e2d0bd0ab c86dda9b97300585e3c2d102725da0c4a9d16409 4b74840efef56a2c27780c7ad4b19c350eee08a3eaf4f7c93898cc66cc21180b
GET /api/v1/campaign/status/0/type/rb HTTP/1.1
Host: pancake-trading-fee-rebate-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 500 Internal Server Error
access-control-allow-headers: Accept, Content-Type, Origin
access-control-allow-methods: GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: public, max-age=0, must-revalidate
content-type: text/plain; charset=utf-8
date: Wed, 24 Apr 2024 06:20:59 GMT
pragma: no-cache
server: Vercel
strict-transport-security: max-age=63072000
x-vercel-error: FUNCTION_INVOCATION_FAILED
x-vercel-id: arn1::sf6xh-1713939654481-84b20113a5b1
content-length: 56
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/css/d17697a543226a3f.css | 76.76.21.241 | 200 OK | 88 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/css/d17697a543226a3f.css IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (12031) Hashb80619f45b0a559fb9753cf421927c8c 040f73d81edb8cc00315c757d0de8a8e5ce7abb9 5ff0b2aaace336e34deded8e9b47d6d6db5fe5ecb1937fd2a64c9ae5c707643f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/d17697a543226a3f.css HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 541034
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="d17697a543226a3f.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Wed, 24 Apr 2024 06:20:52 GMT
etag: W/"b80619f45b0a559fb9753cf421927c8c"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/css/d17697a543226a3f.css
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::6m4hn-1713939652150-939e19b31940
X-Firefox-Spdy: h2
|
|
| api.thegraph.com/subgraphs/name/pancakeswap/pottery | 172.64.147.225 | 200 OK | 7.8 kB |
URL OPTIONS HTTP/2api.thegraph.com/subgraphs/name/pancakeswap/pottery IP172.64.147.225:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectthegraph.com Fingerprint6B:E2:7C:AD:D8:69:7D:09:92:A6:9D:9D:C2:6D:25:DF:03:57:C5:AC ValidityFri, 19 Apr 2024 23:12:54 GMT - Thu, 18 Jul 2024 23:12:53 GMT
Hashb9ea965bceece5609f674e41b609d526 e3f0fe5c4799a649e2ae528cef2012a362b4e5ea 82f317a329661f41d173c2d721f2e7745ac53c8884e0b165e5f9d99d2aa0d02d
POST /subgraphs/name/pancakeswap/pottery HTTP/1.1
Host: api.thegraph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
content-type: application/json
Content-Length: 287
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:54 GMT
content-type: application/json
cf-ray: 8793fd787f701c0a-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-headers: Content-Type, User-Agent
access-control-allow-methods: GET, OPTIONS, POST
graph-attestable: true
set-cookie: __cf_bm=IUK8.y7xEofLdzmVnJZivHh3wy692DIzl658ibI0G5Q-1713939654-1.0.1.1-_h2TvYEPIPFFZ4x_0NV45eBYoVlqr8X0.5f63RqVTTg4nAup1Zxz837TW.9oTXEPLHpK6aN9r0z6goSP526jrQ; path=/; expires=Wed, 24-Apr-24 06:50:54 GMT; domain=.thegraph.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:21:00 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-334KNG3DMQ>m=45je44m0v873867766z8834067533za200&_p=1713939653602&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1090957534.1713939656&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AAAC&_s=2&sid=1713939655&sct=1&seg=1&dl=https%3A%2F%2Fpay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app%2F&dt=Home%20%7C%20PancakeSwap&en=page_view&tfd=9321 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/3region1.analytics.google.com/g/collect?v=2&tid=G-334KNG3DMQ>m=45je44m0v873867766z8834067533za200&_p=1713939653602&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1090957534.1713939656&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AAAC&_s=2&sid=1713939655&sct=1&seg=1&dl=https%3A%2F%2Fpay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app%2F&dt=Home%20%7C%20PancakeSwap&en=page_view&tfd=9321 IP216.239.32.36:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-334KNG3DMQ>m=45je44m0v873867766z8834067533za200&_p=1713939653602&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1090957534.1713939656&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AAAC&_s=2&sid=1713939655&sct=1&seg=1&dl=https%3A%2F%2Fpay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app%2F&dt=Home%20%7C%20PancakeSwap&en=page_view&tfd=9321 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
date: Wed, 24 Apr 2024 06:21:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 9.2 kB |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash5cd6e2049dea19bbf469b0bbf0ecfb6f cacf5b3a2f83e954e0a851aead086cc245cb1feb f2fec1f4d963ca961c999ece7d5389696b8b2320d1406e9576a8d8632c7a28ad
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 52
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:21:00 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x673516E510d702Ab5F2bBf0c6B545111a85f7ea7 | 104.26.14.21 | 200 OK | 2.7 kB |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x673516E510d702Ab5F2bBf0c6B545111a85f7ea7 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
Hashe2bb49cb8387d0afc9dfe79cb54a816a a485f3494fb479a42293e614727a784adc470524 32232adb41865e9c03ec8628e11729953b1eac46ac43f1ab9fc8e973b34b46a2
GET /v3/56/liquidity/0x673516E510d702Ab5F2bBf0c6B545111a85f7ea7 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3KarDOcd7l6oa7Cj7Ns8Q46ZoV1FBH9Lg4uHK1n11zkTv6oD3p4tMdqtKWV11AJKU%2BUxJbB%2Fu1q3g7UDvUv4s7IS%2Bc67lVkFXbNNly6DYBFvDawoSrnamLCeDBDmj1zZRfT8HVq1cP%2FuqaA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f79ab1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:21:03 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:21:03 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5185.17a9876281b49b94.js | 76.76.21.241 | | 170 kB |
URL pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5185.17a9876281b49b94.js IP76.76.21.241:0
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size170 kB (170237 bytes) Hash1cc2b2fc08b0a0772dcb49c0a2cc406e 02c4c094e825ca5343f5278f024f9ec2010298ce 6c8e7944580e21fe25821fd97a14dee32539407d22db0a6a3c64d39d4c72ae30
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5185.17a9876281b49b94.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 6416
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5185.17a9876281b49b94.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:55 GMT
etag: W/"1cc2b2fc08b0a0772dcb49c0a2cc406e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/5185.17a9876281b49b94.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::47nm6-1713939655007-c7071506131e
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 5.7 kB |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash80d6b4aa397b69c9300b6165be9e62e3 3fa30167465d0cfa5c7eea6e03a1213dcdec521d 694809d970c6f38b5ce97e62f9a0949a6590d45a15743241d8704d01e3a36662
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 52
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:59 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:21:07 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x36696169C63e42cd08ce11f5deeBbCeBae652050 | 104.26.14.21 | 200 OK | 117 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x36696169C63e42cd08ce11f5deeBbCeBae652050 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
Hashfaf9a815e602d5417f42f3ac6b89e96d ac077c22f73b6e0cc1c1f2266bbb9704fd87ce29 7961e51cf0e6e4c6b1c235da13a1b43933f27562d0ae4698bba6189d875ee556
GET /v3/56/liquidity/0x36696169C63e42cd08ce11f5deeBbCeBae652050 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z76f790RVk7DZptC7HveC3ajKxs1DbmOUuq7ydbhCxRhsBh1%2BtyVItjwLVV350sQxqJ3FHCOK7YgZ9f3CwGJeQWt%2BRtCidHHpbmP%2Fu87yMa%2FWQASVaxTMmWZIHETYoUXgE7sd18nFj7vPlE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f79a61c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x07b2d7379427d9A5AC96D704D53983b41D9d0082 | 104.26.14.21 | | 78 B |
URL farms-api.pancakeswap.com/v3/56/liquidity/0x07b2d7379427d9A5AC96D704D53983b41D9d0082 IP104.26.14.21:0
CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
Hash9f6cdfb2f284242a3298cd5cb9620fed 62448f92b9c61ed0589e51bfdc76b027f1034ef6 943d6d6a318108eedbca1142baa8c0385aa548d2dd9ff4d443221b54e77f3904
GET /v3/56/liquidity/0x07b2d7379427d9A5AC96D704D53983b41D9d0082 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zyq5O9zONRmhQQ7dxRN2LHK8N5JSaHJbONqXra12Ks8EAxeryFhs3GLbsfoaXdgmjcjffiVxoAj1OS7PBQo8G5z8vEXMl1o13dPMjowl4wBoVW0pC%2F5QiCw4g99MYtngmTZtd0%2F2wdO17gY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f698c1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getDesktopListings?projectId=e542ff314e26ff34de2d4fba98db70bb&page=1&entries=9&version=2 | 104.18.27.46 | | 5.3 kB |
URL explorer-api.walletconnect.com/w3m/v1/getDesktopListings?projectId=e542ff314e26ff34de2d4fba98db70bb&page=1&entries=9&version=2 IP104.18.27.46:0
CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typegzip compressed data, from Unix Hash8f34caab0a26b38e6d3f0d2572a71ab4 ef8473c5d86281fb342130ca6326d1c164480023 f28b30851eb07288fb3741fac4739f1465b1b88c25ffb5a6048ea3d233f30fde
GET /w3m/v1/getDesktopListings?projectId=e542ff314e26ff34de2d4fba98db70bb&page=1&entries=9&version=2 HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:56 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=43200, s-maxage=21600
x-robots-tag: noindex
set-cookie: __cf_bm=C1d3O57jphqVccjopMOqmOKKw2sHv_E4L4.nmK2OLdo-1713939656-1.0.1.1-PUcng3wnt5lo4IMYmeG5xvpBTd1ASX4l2j9yB_8HvTS9wsjwJDmf.8Q90FQiRQijZosRQhSLGp.6TigjVfgf5g; path=/; expires=Wed, 24-Apr-24 06:50:56 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd83ad1156af-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:21:12 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:21:13 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:21:14 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 48 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash9a5d0e654221df3d61a7d0eaf06ae88f dc45e5a56ff2ca0b1acde66ab4e04dcb79722937 da0f54048448af83563114787d240ef40930c36cc541171980ea41eee4c83491
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 52
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:21:13 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xB9f47C14b945915badb1217af781AA7De6f6569f | 104.26.14.21 | | 79 B |
URL farms-api.pancakeswap.com/v3/56/liquidity/0xB9f47C14b945915badb1217af781AA7De6f6569f IP104.26.14.21:0
CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
Hashd2e4b01f9124e7ff841846bb500387db fb25482fd89c9f2a6bcdd7865c83a6b0ade9ff4f f393e162b73830b647dd5448daefc74e66596f29eac976f3e971c1cd1220f286
GET /v3/56/liquidity/0xB9f47C14b945915badb1217af781AA7De6f6569f HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zmGCOUrqxvoHjL%2B8zsnF8VW6z1GbiQ0U7viRyf4zMolMwqmvdae%2BGnkXGMQLuFHZFfqDcVosWTP%2B5p3aY1n0hDHfZnsPTE5BjA6BB6K3uMEBti9EBnHgPAikvGZR5E6YXolfE5bnR9U3cLk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f49611c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 06:21:19 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/cmc.json | 104.26.2.169 | 200 OK | 2.4 MB |
URL GET HTTP/2tokens.pancakeswap.finance/cmc.json IP104.26.2.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
Size2.4 MB (2405538 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cmc.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f63eedff26a5bbfc2fdea60fd05839a7"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XF%2FzPVFLWvJejoQJ6UyRJHBaG9NUkDDgiDCYnvHPcuc%2FfvGMdc6iLhzsnFF7AE7n%2F2LqK1rhjMcyaC8xiAR6vgZOdex7lMv%2FvTIYfHCm%2Bcr0jTiTLQqtdC7ImzlaMUVBEl2jBb%2FL8ZLGaLMnlQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8793fd7dcf0db4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5168-df49aea4480b567a.js | 76.76.21.241 | 200 OK | 27 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5168-df49aea4480b567a.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (10931) Hash49f28ccea58e4a050eda6adb87875688 a9eead0a11a7a042ffc7490aca1e58e0e9de8455 9f1f213f235f2d4ed66bbc7dc5ef843147bdd5791f2efe05766c79bde1152cea
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5168-df49aea4480b567a.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 6417
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5168-df49aea4480b567a.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"49f28ccea58e4a050eda6adb87875688"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/5168-df49aea4480b567a.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::47nm6-1713939656364-7e9b4a84eaa3
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xD4dCA84E1808da3354924cD243c66828cf775470 | 104.26.14.21 | 200 OK | 196 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xD4dCA84E1808da3354924cD243c66828cf775470 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashe2452a11d5f2bbdab4f36f7e336bcfeb 394f0b81a0f62c611968b3f322092300c3488020 754be930ffc7e3504087e08ce72554146950fef339a94c34f67605c3681210a5
GET /v3/56/liquidity/0xD4dCA84E1808da3354924cD243c66828cf775470 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rSM27ARH0tbIS0Vkd0RA1PBAK26TcPa35LgUTO3%2FYoCNH1vqxkPgFXIs3O3dU9TzqMNES8XTCZGYqb30cNXFSVtLRuBkdjGk%2FyhZHPR4chQOYxhGPZP3q%2F%2FCByZO0SheGrlOyd%2B2VloTrQc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f799c1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x6ee3eE9C3395BbD136B6076A70Cb6cFF241c0E24 | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x6ee3eE9C3395BbD136B6076A70Cb6cFF241c0E24 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashd79c04f43372aa618f393fc0678d6afd 3516eb53ba3942dc8ee61715381129c547e63053 ad8140fa97b3e836b161fa0d8df0c7df999edd068f2409c653937fec4a3e5598
GET /v3/56/liquidity/0x6ee3eE9C3395BbD136B6076A70Cb6cFF241c0E24 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RljlllR5DQVpnDyzdJ%2FvlEUVJsQ7lhrvT4UG51XyYmRVj4QYbeMixObl3p8dK8XR8RmQFrzr%2Bh1WP5K%2BHrFMMUeLx8PJGmGbUNYwuvImCzEGVH37IsQ1N%2Fz4UgxIxIrJ8dPp60xI4tNw%2FZs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f496c1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x85BeA4fBC57fA22b41Fb1632f0D9a6A99390fd0a | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x85BeA4fBC57fA22b41Fb1632f0D9a6A99390fd0a IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash6a18002faa1511fc4721877a8be30afc b2035d30eb0e448e2bc355e94fd97396d2373f57 42995fd344d07f4099e5213a7357e73c8bdeca5fa0eae1935f9ec94bf05120f4
GET /v3/56/liquidity/0x85BeA4fBC57fA22b41Fb1632f0D9a6A99390fd0a HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=immJMo%2B5sjg7MuyxHbFG%2B4G6iQcW%2BjaGgxBgMEl8YeO6R5fSmre9csJyi23Z5kXDB4AJV8o9zBoWMH60bgH1hpHSfg5JX7lkfPkicSSx9Gon9WTA5j6eJZQveZcMYCVGyn%2FnlX%2FhfMKDxAA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f59731c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js | 76.76.21.241 | 200 OK | 26 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (25929) Hash63c3a4ce0da82887fce6748caa0cd005 43a32cbb7cf8d5186d99f245bbb3ce0c578be4f3 eff2b341ff03249262f314d9527c98f30778a6192e1c5cd7716dc130d7a8ff12
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 55350
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="quote-worker.1ac00aeec6a8b8d4.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:53 GMT
etag: W/"63c3a4ce0da82887fce6748caa0cd005"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n98b6-1713939653569-38de13726357
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xd15B00E81F98A7DB25f1dC1BA6E983a4316c4CaC | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xd15B00E81F98A7DB25f1dC1BA6E983a4316c4CaC IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash87d4bd79f56f71e41b866e0a2c8826df 94db6b53bc0872c9cfd09cfa17bdfddbd891ae26 6a796616e05272e6256569a45e1fbed717d3ee8f1fa77b3aecebfc95d5529d9c
GET /v3/56/liquidity/0xd15B00E81F98A7DB25f1dC1BA6E983a4316c4CaC HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tmewssG2bLWCGAavW%2FnZPxol6V9tcRXN%2BdKZ8a4HWyWaAkklC9hu59uiSCw7DSuUXTi1NtixjB%2BYxeFxM92AZciA4Teti8KLNVLsYmcYbXTBfXQAEEIEpEJMfzsldLXy6mwB96w%2Fjz3S2gk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f79a81c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/chains/59140.png | 104.26.3.169 | 200 OK | 4.0 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/59140.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash1ceb847edb47e9c5c20a1fb57a1f7deb 828fdeffb61d6e22b516daf84e6471692bc2a4e7 d278067eb81dbb2506b25e1fc008f941ccb491c1d1bad680482661119209f346
GET /web/chains/59140.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: image/png
content-length: 4007
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "6f83df69f71339cb5769c76cd3cc84d5"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MZaLM7NxR5L8degC%2BC9hDnI7Cilx9kH4g06bvW2ibTh5bfJ4p53hC1oY3CDIwmgEIfKOCGs1zeJEXWIzvWnNLXUDcdXjlKCu0geeGAlKxCLl9G4cxyfAf8sSq20pMwAoptG4cyWhrT0HGw2pYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd7bba53b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xD0e226f674bBf064f54aB47F42473fF80DB98CBA | 104.26.14.21 | 200 OK | 198 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xD0e226f674bBf064f54aB47F42473fF80DB98CBA IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash250e09d7aa5e2b349d22d45d1b09fdec 529075a618dcf8aaee5c21c898fc4f961663ac5d ac20a05469a8d2bcef70fd4254d300e3de8662ce8837729289903f9258f231c2
GET /v3/56/liquidity/0xD0e226f674bBf064f54aB47F42473fF80DB98CBA HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SePS4dpIePt1A%2F4ejkZtJfvS4h4UNLSW8H6W0hAjqcIINaJ1U1Ms9viO9OBbI5n9ihemFxJbY%2BCJ4nk4b%2FKdykKHXcQtQ3eL6iBqOQRag%2F8C44YycmdUGfClil18jQucfUfHmb2YTRWTAiE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f496f1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x7B1db35fbd95548777B9079527e8fa2a70fb2CE0 | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x7B1db35fbd95548777B9079527e8fa2a70fb2CE0 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashd79c04f43372aa618f393fc0678d6afd 3516eb53ba3942dc8ee61715381129c547e63053 ad8140fa97b3e836b161fa0d8df0c7df999edd068f2409c653937fec4a3e5598
GET /v3/56/liquidity/0x7B1db35fbd95548777B9079527e8fa2a70fb2CE0 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zss1gErDUvVTt%2BPIlmrUhsEEGS55ZGFgn3dp2vB7ursz1i3cmBnn6h1dI8T5ebojhxrOFWxx5VQe8blV1yfBasoZS%2F2dU04fAb2ye%2BC8Wimna2WzSvSESat6aJrIIUu50d%2Fj6M1sPTghHKc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f597e1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.walletlink.org/rpc | 172.64.150.248 | 101 Switching Protocols | 0 B |
IP172.64.150.248:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectwalletlink.org FingerprintB8:73:73:A6:43:5F:26:A6:7B:B4:63:F2:19:C1:AE:68:20:D1:2A:EE ValiditySun, 10 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rpc HTTP/1.1
Host: www.walletlink.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: /ufViFWL+rR12op68jfzBQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Wed, 24 Apr 2024 06:20:55 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Ve3F2oNVxzk1RnoWBzty+NTZC3Y=
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=Ak.S9j61J9ipp_Jp5qXguKsDVbM16g0rqBmCtfxgfU4-1713939655-1.0.1.1-FQyaUiafvGo03bKIGbxDAHd3WD.ZlLwXZRPvZ5.36BU9t54FkgKbU5Ymyk6ksT0RNUj4KmZ_.o2dW7V96WAqJA; path=/; expires=Wed, 24-Apr-24 06:50:55 GMT; domain=.walletlink.org; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 8793fd7c5e71b512-OSL
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x647D99772863e09f47435782cbb6C96eC4A75f12 | 104.26.14.21 | 200 OK | 198 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x647D99772863e09f47435782cbb6C96eC4A75f12 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash85affe797e5313a2b8749d494c753b6d 7efba7e5d74ede41a8d0a4f5a9c7b8543214bf81 95bb915e325923c868626c01f38edda7b1d766e503662ad83a2ab24646c4bcbc
GET /v3/56/liquidity/0x647D99772863e09f47435782cbb6C96eC4A75f12 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P8vb4Z3J9gWtLHXro3svrjRcwzDwE0Q19ZtZUjRotG6zEqH09lE6dvlczuqZWwdvmJ1IlIcOwhmSC7XwwC8SyhygnjvBWUBtfDnPPq1bpsaqR3k4IIExiIY2afGSXGzsLOwy5RYKEI2nqFU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f496a1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x466e7d53e23620a24db23E2B1f8BD10Ff52116Cd | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x466e7d53e23620a24db23E2B1f8BD10Ff52116Cd IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash6a18002faa1511fc4721877a8be30afc b2035d30eb0e448e2bc355e94fd97396d2373f57 42995fd344d07f4099e5213a7357e73c8bdeca5fa0eae1935f9ec94bf05120f4
GET /v3/56/liquidity/0x466e7d53e23620a24db23E2B1f8BD10Ff52116Cd HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vCoZJXKOkCJCXEy8CHFsesos8ty3%2BkocgnyoI4IkcojPy862nLtQX6jRCLe9lFGeGOX05TDkb8QpdCVDaLTICpWCn3aD6nHACfydRGxeR8ozHiX5fAC5a52u1uR9K4XPAzsHNZOJe8ftTzs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f59781c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x6425bC30D0751aF5181fC74a50e760b0e4a19811 | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x6425bC30D0751aF5181fC74a50e760b0e4a19811 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash37e2f3f64c5fbccd280af93406a789d1 564dc9d20ed21993dee3f04e924b155dcb29c1b6 74d7caaf9712f21083686283f56d85c4a2cb3cd60d1b712d63a791f52a3d66a6
GET /v3/56/liquidity/0x6425bC30D0751aF5181fC74a50e760b0e4a19811 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lJWB2k18ffBQqMjzxhoB29b6yz5yvILaL1kC06hFJzBY70BYHUZCoDd5maZ7V9V%2F37p%2B%2B7oE3wSNrxujsF5hHKM2hBFtAI%2F4JH%2FIFKmveNDNgYIUVPS3jr9ZyZbmJHHXj7%2FJEs9ZzcmsM7M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f69901c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/pancakeswap-extended.json | 104.26.2.169 | 200 OK | 113 kB |
URL GET HTTP/2tokens.pancakeswap.finance/pancakeswap-extended.json IP104.26.2.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
Size113 kB (113250 bytes) Hash40c72acaa6a350b18347e11618ba79bf 5ce40c4f923e05162d5eb4c6748dce208ccef6be 5e4082e2e92171ec2cc9adc36b81f4281e484486d86fe51b367e713cfa9f82bb
GET /pancakeswap-extended.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"e0435e8c440d2a657b231474d5cde1ff"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EJV4GZafSrQy2QiFbU%2F1VysFt4KbXeJRuO0L%2BRhMxb97vjAaY4T2B2OZNk5cLr2jLaua92zlbDTsS8Cz6omuNNLaR1XgsCq5aEax%2B6e1bdFbAiDOrNoMw2w772WQ4BnvAakwhM0dJ0yicHyOEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8793fd7ebfd2b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1383-da8ddc1e8fa88ba8.js | 76.76.21.241 | 200 OK | 41 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1383-da8ddc1e8fa88ba8.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (8427) Hash81775f0243f7ae5c7c890580871eede4 06161a1b0242d78deb1e47eff177e7762d446650 613bef79874b81063b390dd2f2d37a432702a1742a5bdd43fa58ca4d389b960a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1383-da8ddc1e8fa88ba8.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 6417
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1383-da8ddc1e8fa88ba8.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"81775f0243f7ae5c7c890580871eede4"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/1383-da8ddc1e8fa88ba8.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::8zhxf-1713939656611-619dc177770f
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x803036AC78752EF599EC75c500ac8B0Ac0bE67dF | 104.26.14.21 | 200 OK | 184 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x803036AC78752EF599EC75c500ac8B0Ac0bE67dF IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash39f2fa508ef8048474a4127f55a20157 60fdff2046fca9eb74de1ed895327bf170638aff fb3558bf78cb840aa24efbbb6dac69037677e3a664c9ddcb4d5c9063d9a66222
GET /v3/56/liquidity/0x803036AC78752EF599EC75c500ac8B0Ac0bE67dF HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DWd15NCLibGs2ATWNLPjXR7Brpi%2BhJkF97q%2BMnpfrU68UgHzqv5vj%2B%2B6BuUQ0IGvQpDYgJzYNZt4YB3oC2%2B3V1cIpNkBR%2FvgFbTnGvUF5ZBtUGCMrXOw3JDXxGDuDT1VAw4wBoj2ZsI3X5U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f59721c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xFC75f4E78bf71eD5066dB9ca771D4CcB7C1264E0 | 104.26.14.21 | 200 OK | 196 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xFC75f4E78bf71eD5066dB9ca771D4CcB7C1264E0 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash772222b9132c13fb4879620232598b3e 7745624db5d85c81617db8a22484e8b108cb6f19 83b1d3b52c52c9bd0bae697009f099b1d7cb3407d85b75db03a632b2d4395ae2
GET /v3/56/liquidity/0xFC75f4E78bf71eD5066dB9ca771D4CcB7C1264E0 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HxqVUu3ID4pRD5iaEoLheWMtwCVKfwiWHPV578z0sCTI33EUNnJUXU0e6qLvAsZ3Ki1lSvfH%2Fcoyiaoe777m%2FYmBPlNA2FJOQg4vU0zfmEY056ANx%2F3OhlceR8MXaer7wSSI7G815dJW0Ts%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f79a01c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/blocto.png | 104.26.3.169 | 200 OK | 5.0 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/wallets/blocto.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 232 x 232, 8-bit/color RGBA, non-interlaced Hashd87c961f741da9f48ee0b84b2d8c5d97 0af6331b85523be30d072fc3d844157c1fe76cac b06b94134a2e5d91e6809f04b080866fb12d42a875c3fd98ad65ffc6f3e0a0ee
GET /web/wallets/blocto.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:54 GMT
content-type: image/png
content-length: 5015
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "a9d3ccbc66959bb406ed1966e0f92fcc"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XPwvz7t2tJqgio%2FIDuu28m4ccNFXXiAn3yYJy6Kc0rrDK2tPYNlL0tXuraHG0UU2nxQ%2FxB1Ev9vinIa%2F%2FWzQzVOkkSrDL72f1y%2FFN%2BRFPJKEx03VnNsgZkOMlcSMCNDGL4mzylPMEF%2B0VG9Tcw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 6573
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd76aef3b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x7f51c8AaA6B0599aBd16674e2b17FEc7a9f674A1 | 104.26.14.21 | 200 OK | 210 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x7f51c8AaA6B0599aBd16674e2b17FEc7a9f674A1 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash6b5a3ac9a1c9dd0ab5bd6dd872c06423 dab20c432a17b70dbb47ac69eef0fd4bb0749708 3e64509a385e89fed22bd9668e3e6f8df47dea38693b8d1d63c0467805dbbf8b
GET /v3/56/liquidity/0x7f51c8AaA6B0599aBd16674e2b17FEc7a9f674A1 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rboVVT7ccf7sl9wFNoBEm4LHQnzr06ZG0nmInHwayZX6BdXQmPCzwkBspI%2B02hlsGFw8UyEEunhGkS3v%2BsYAhh1FuVoli8TAFbJwmg7ia5yxYI4UJ8hBHg2UY%2FlhbrtRveMYiuKIVTtLvZc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f799f1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x497a5170A242AEBc7AA7aeD735B164A0be3Bd5Fd | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x497a5170A242AEBc7AA7aeD735B164A0be3Bd5Fd IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash46c8c40f5de528bb9965061e492c74e3 9f5e884f60646f8cc15a0030a83d94f2281109e2 36250b0723e99371e0890e8fcb9456f4b2a42e88c5a5a19ea9876d6b0f69ec45
GET /v3/56/liquidity/0x497a5170A242AEBc7AA7aeD735B164A0be3Bd5Fd HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gfN0EfR323xl4ZXmlr52KjbV14pxS3WV7EWPbWRvzIj9bAwm2c8%2FReo7ecviF75ttsdtQoxOrLhNZbB9e5Owx29b%2BPDOqhcJq%2BJFqxFM27glNMmpI2p77q4sgBIctUJxTaGAwoixmDqCYyY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f69971c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5569.1a233de1fa5a4a3f.js | 76.76.21.241 | 200 OK | 474 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5569.1a233de1fa5a4a3f.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Size474 kB (474242 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5569.1a233de1fa5a4a3f.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 55339
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5569.1a233de1fa5a4a3f.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:53 GMT
etag: W/"2387c017008ccf08111d6a96213c431d"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/5569.1a233de1fa5a4a3f.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n98b6-1713939653605-52cd75d4a350
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7875-e604b8271f71ca63.js | 76.76.21.241 | 200 OK | 10 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7875-e604b8271f71ca63.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (10313), with no line terminators Hash896a854ebbb38fc1965137a8fab64789 5d9f4394da8ff66fc2e7c24693feff3e43155302 54fc8b94e6f9031526cb84c32f641c23a4d17b17a753eeeb289a776711b5cb94
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/7875-e604b8271f71ca63.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 6417
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="7875-e604b8271f71ca63.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"b00edc9b681c54e9a79de581d19f89b3"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/7875-e604b8271f71ca63.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::czcxr-1713939656656-3e5392920c96
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xC2B3dbBF26d43617036b0ebA53aD2DBD945adebf | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xC2B3dbBF26d43617036b0ebA53aD2DBD945adebf IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash9813562c50540ea85a2a9ffe92e4fd87 b69a94eabb4c1daedb7769d581383e74449582b5 c52fb0bc746db190632f5974a9005df2b422270a2e59d1d8d46f616f7cb62b84
GET /v3/56/liquidity/0xC2B3dbBF26d43617036b0ebA53aD2DBD945adebf HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RSspiPz8Suw86i%2FoX%2FDW%2BIwpzHUiHRPhq1I7Itm%2F3NXXzAKZWCxxJk1ySjSbUTmafu51lpuucW30FM7kFlIyKGyNCi%2FTJEbGAnhY93TbA5slfs1py5gHPfe3%2B8yiuqM%2FZ6Zed1NZymxaKgM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f59811c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/782.11a99be71c87365b.js | 76.76.21.241 | 200 OK | 14 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/782.11a99be71c87365b.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (13606) Hash71fdaa3dcdc98dee1fab697481b187cf e62a88cd0ed83f49ff45893cf065c62e9000f2f3 e0094c07b564c63ab21863bb5b4166184db600a3192dd1e6b0c3611891184d5d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/782.11a99be71c87365b.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="782.11a99be71c87365b.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:55 GMT
etag: W/"71fdaa3dcdc98dee1fab697481b187cf"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/782.11a99be71c87365b.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939655240-cb425852cac9
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Kanit:wght@400;600&display=swap | 142.250.74.106 | 200 OK | 2.8 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Kanit:wght@400;600&display=swap IP142.250.74.106:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeASCII text, with very long lines (2920), with no line terminators Hash8f2106a2bb0a863f9c1b1616f24bcacf af845c9d338acb827c2f5f1e5c1c86d1ea378fcb 7fd348797a885261baa280e7708052426cea481ee65000ee4936ce7c7c4b6ac5
GET /css2?family=Kanit:wght@400;600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 06:20:52 GMT
date: Wed, 24 Apr 2024 06:20:52 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/cmc.json | 104.26.2.169 | 200 OK | 2.4 MB |
URL GET HTTP/2tokens.pancakeswap.finance/cmc.json IP104.26.2.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
Size2.4 MB (2405538 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cmc.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f63eedff26a5bbfc2fdea60fd05839a7"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=avcVKR%2Bd%2BYIPogxc%2BGR2%2FQDaBqW0cS0eN7TXH00OyMkkMHWJ%2BzvcHz%2FjNGQhO7t9jHuFPBh3WK3zgYk7sbzDxM2cleTkeuiXSR3koAEgvyJa4cWmA9cg6u7VcDw3XAIk4Zti4peb9FQ6bUwyBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8793fd7dcf09b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xDBbDB7dd8870ee0433f50Dd17cE849703be56704 | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xDBbDB7dd8870ee0433f50Dd17cE849703be56704 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashe0c9d90c195a6083788cd96e197fe3c6 29074063bfde62363d4928a0370758246181239a 877b4f10933ebef955597e989bde715f07808b9e6b52a12b9156a82a19150fe5
GET /v3/56/liquidity/0xDBbDB7dd8870ee0433f50Dd17cE849703be56704 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=swOLkVQPyEtpu60uaD7upMo%2BnTd%2BbbrCMpY1XuA0dsIfVghOB8L9jBVPm1ZFg0W4RJOX3BgoQYMpbPYB%2B6eRx3C80jvqDQHqTkR3uPNCy5Gs5wF%2BmNQI2Q4tEBYD5X3gD4oXEY7ie%2BVrxCk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f597d1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/banners/liquidStakingBunny.png | 104.26.3.169 | 404 Not Found | 0 B |
URL GET HTTP/3assets.pancakeswap.finance/web/banners/liquidStakingBunny.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/banners/liquidStakingBunny.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 24 Apr 2024 06:20:55 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nMqfhtfrv3RNNS7F7e8bKao%2FSQcXyEI8lEa57Bl8IYjCUwS%2BX1pkCUxWGhX0MoM0INb9n%2BOGd1DB7kzePFWyKzFKqSt1tFwPqeWR2t%2BdNsTU%2FZ7DwBUt4MBAESTw5m7%2F%2F2KYH7ofutXRPVkmsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 8793fd7bba5cb4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x77B27c351B13Dc6a8A16Cc1d2E9D5e7F9873702E | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x77B27c351B13Dc6a8A16Cc1d2E9D5e7F9873702E IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash471d4cf0dfca8a7a80e3a35873be8cf1 79ae91cdfa590f8c62e879bdfecc1e7382d79c7c df47f238302e83658bbc039155accb3927cae6a36f8bc46e0c259d894f6b9aac
GET /v3/56/liquidity/0x77B27c351B13Dc6a8A16Cc1d2E9D5e7F9873702E HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ID4X474HqzsQnNGv%2FySTJs2IfyDrh%2BB%2FYYSULk5%2FhstUtqhwN83qga1EfX8H%2BOrltioazQXHjjSfDRbsrMhlJ%2BAG9sDlYwPiOvhFv1cPAec7DWbn7kc1OKYarz8pjKL44q5KcJ7%2B8XRzdrk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f69891c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-TLF66T4 | 142.250.74.40 | 200 OK | 230 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-TLF66T4 IP142.250.74.40:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (10853) Size230 kB (229686 bytes) Hasha812aae78f9bc84357a02ae7823d4f99 1e705f08ed479f567ecb29e4777515a63b843b40 666b3f6a27125e7a4080c1ac6465630e385bf0cc946e24f74734490478460748
GET /gtm.js?id=GTM-TLF66T4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 06:20:53 GMT
expires: Wed, 24 Apr 2024 06:20:53 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 78874
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x6bbc40579ad1BBD243895cA0ACB086BB6300d636 | 104.26.14.21 | 200 OK | 196 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x6bbc40579ad1BBD243895cA0ACB086BB6300d636 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash5ca23196cfe7a70d3715928ada1ce59d caa1de66eba97687b1182dba6fce458e02020798 89206e7e67ed02367ee4f013d195db31ca72b42f9587d08786afe63d14866bb3
GET /v3/56/liquidity/0x6bbc40579ad1BBD243895cA0ACB086BB6300d636 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=12QgWCU5i2Oqy8yd6BeECKkhTWFk%2F2zSPQ7zLnm%2FlaD8Ejaw8nqI8IqPs1zb1owaGwgDQzxGlMtD5ykRu140pBeNV32DLihyuZaAwH12V8rPeK8KuH6UjpJHOyGC47cJ6Z004vonypoMKE0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f496d1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xb4E9DeA6105089f15685508B8EF2e7f7F5A1B16D | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xb4E9DeA6105089f15685508B8EF2e7f7F5A1B16D IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash008502ae5f4293b7fd3224eed2c3d77a c44da4666b93610f51208d52833df5593b1df9c1 945be0725da0c574593004f024c18fb22b7e5875d6cf1601640e8d3861861223
GET /v3/56/liquidity/0xb4E9DeA6105089f15685508B8EF2e7f7F5A1B16D HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TazhXg4c2vEBw8HgwgTvLobeghF%2FPJoVtx91EXN2UQHPFMfpd%2FDitenQ3I3XT92IDS7JVYnipYTklvGldOm7tgy0qqdCVIHNqbuwM%2FW%2FFjUjjVNVOPULjvj5apqrYarsgHE1HAkXnhxEBNo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f49631c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1518-807be149c1b04211.js | 76.76.21.241 | 200 OK | 11 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1518-807be149c1b04211.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (10590) Hash3f46977d9b0661718797f9f6a81def97 7827f12721ec5a28d8fc5164f18ad9457c59b6a7 099d9417752b9ce255dfb29a959d0dc91a2baaa6ac71b8d9e408e7ff87044ba8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1518-807be149c1b04211.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 6417
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1518-807be149c1b04211.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"3f46977d9b0661718797f9f6a81def97"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/1518-807be149c1b04211.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::czcxr-1713939656585-52ee00fda944
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4768.d9b1d54b7879d92a.js | 76.76.21.241 | 200 OK | 294 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4768.d9b1d54b7879d92a.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Size294 kB (293660 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4768.d9b1d54b7879d92a.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 554930
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4768.d9b1d54b7879d92a.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:53 GMT
etag: W/"17e900bb83eff348221206d7eeea9bab"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4768.d9b1d54b7879d92a.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::n98b6-1713939653409-51d56b122c9a
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xeF2CF65fF6dce6f2B15F18999673676d5A07F63f | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xeF2CF65fF6dce6f2B15F18999673676d5A07F63f IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash1f2de9d0042a6c5b1ab1ef87dcab59c9 b4100ebf84b96bf9455b54f1d7be01e186c77902 f4314b32a5b6ea373a04f9055f9a9cae5c711ed0699875ff84e71df82f671a3a
GET /v3/56/liquidity/0xeF2CF65fF6dce6f2B15F18999673676d5A07F63f HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UzOob6V6WTOLu24%2BHVepoT3Opiw8Z5DjG7nSqYcIhp4Yf7IEGwG0WjC3k4KJtriq17WpKiDYD28uyVpHJBJVGk7XAL0Q2jgnU7mn9FyfyQRrndX%2FrLsCoZXFt6AeBWKJHavDphQCwEUuSGo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f59711c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5168-df49aea4480b567a.js | 76.76.21.241 | 200 OK | 27 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5168-df49aea4480b567a.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (10931) Hash49f28ccea58e4a050eda6adb87875688 a9eead0a11a7a042ffc7490aca1e58e0e9de8455 9f1f213f235f2d4ed66bbc7dc5ef843147bdd5791f2efe05766c79bde1152cea
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5168-df49aea4480b567a.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 6417
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5168-df49aea4480b567a.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"49f28ccea58e4a050eda6adb87875688"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/5168-df49aea4480b567a.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::czcxr-1713939656662-c5b3737f499a
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x08eAbc3d13Fb4bdFFD1F42a5644C1c826aCF62c0 | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x08eAbc3d13Fb4bdFFD1F42a5644C1c826aCF62c0 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hasheefcdf96dab67faea6463686c0b8514e ef9ad53e6e3bfd9de891dc6c0b6089330b80b082 929af85813a7f687029ec2f914216d217d1dd2fd0d6f167c5e3894a56a8da484
GET /v3/56/liquidity/0x08eAbc3d13Fb4bdFFD1F42a5644C1c826aCF62c0 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s7rfsfwhvAckVcNHXNBI9Vxn7kFu5OBxhsRS5jxGu9xsCXQ8IhMhRxEhwxX2i3fdeXbTNMZ1Ju9Hcb3f1jd8tlbHFEO9VrYAnakZMPfOwkGeO0ivRsAM53Ylo%2BJriDd%2F8zR0HU%2Bi9H4Hpgs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f698b1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtnRktFSnFhTGduTUxUQ21zakJnMWk0cjF6aUJuMU5lOEx6Q3docWpOS1Y3MSIsInN1YiI6IjI4ZmFmMDJjMjVkMTM4ZDRkZjhkNjkxZDBjOGYxYzA0OTkzNGUwYjE0Y2QzMjc0NDk0YzQ5ZjlmOGJlOWIxNGEiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzkzOTY1NCwiZXhwIjoxNzE0MDI2MDU0fQ.ZH5wXC6tHlcq01e5gyJ8235ThtubajD4HhgAel3Ai2kWeaUDnHoKx7b3npoXhXyalvCBZkFvMUkxTUGzbfafCA&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true | 18.159.147.43 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtnRktFSnFhTGduTUxUQ21zakJnMWk0cjF6aUJuMU5lOEx6Q3docWpOS1Y3MSIsInN1YiI6IjI4ZmFmMDJjMjVkMTM4ZDRkZjhkNjkxZDBjOGYxYzA0OTkzNGUwYjE0Y2QzMjc0NDk0YzQ5ZjlmOGJlOWIxNGEiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzkzOTY1NCwiZXhwIjoxNzE0MDI2MDU0fQ.ZH5wXC6tHlcq01e5gyJ8235ThtubajD4HhgAel3Ai2kWeaUDnHoKx7b3npoXhXyalvCBZkFvMUkxTUGzbfafCA&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true IP18.159.147.43:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectrelay.walletconnect.com FingerprintA3:38:A5:E6:60:04:20:E0:86:C9:9C:9E:6A:D7:35:A4:D4:04:A2:A5 ValidityMon, 07 Aug 2023 00:00:00 GMT - Thu, 05 Sep 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtnRktFSnFhTGduTUxUQ21zakJnMWk0cjF6aUJuMU5lOEx6Q3docWpOS1Y3MSIsInN1YiI6IjI4ZmFmMDJjMjVkMTM4ZDRkZjhkNjkxZDBjOGYxYzA0OTkzNGUwYjE0Y2QzMjc0NDk0YzQ5ZjlmOGJlOWIxNGEiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzkzOTY1NCwiZXhwIjoxNzE0MDI2MDU0fQ.ZH5wXC6tHlcq01e5gyJ8235ThtubajD4HhgAel3Ai2kWeaUDnHoKx7b3npoXhXyalvCBZkFvMUkxTUGzbfafCA&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true HTTP/1.1
Host: relay.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: K0Wcq5ZwbCTSHk1B7hmivw==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
connection: upgrade
upgrade: websocket
sec-websocket-accept: KH06OiRlVhzexGR1iC35RdKvvoA=
date: Wed, 24 Apr 2024 06:20:54 GMT
|
|
| tokens.pancakeswap.finance/pancakeswap-extended.json | 104.26.2.169 | 200 OK | 113 kB |
URL GET HTTP/2tokens.pancakeswap.finance/pancakeswap-extended.json IP104.26.2.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
Size113 kB (113250 bytes) Hash40c72acaa6a350b18347e11618ba79bf 5ce40c4f923e05162d5eb4c6748dce208ccef6be 5e4082e2e92171ec2cc9adc36b81f4281e484486d86fe51b367e713cfa9f82bb
GET /pancakeswap-extended.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"e0435e8c440d2a657b231474d5cde1ff"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MPDchzUXMDmF5avb0%2B4ScFPqrIec8bnb6Q3LdvLzJXJSgryfpCm2Z4L%2FN1hJ7zOgSKInSCN7c%2Brgtb5ykAczjf4kwXKQAibZBFRl87AXpikdGIYUayVqRiDvZuXzKwe%2BEkJssKYCoxmgjx%2FiAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8793fd7ebfd0b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4253-ece81cd4224dfe83.js | 76.76.21.241 | 200 OK | 367 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4253-ece81cd4224dfe83.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Size367 kB (366595 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4253-ece81cd4224dfe83.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 6422
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4253-ece81cd4224dfe83.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"6b95044fdd2e3177e2dddb81e433471b"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4253-ece81cd4224dfe83.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::czcxr-1713939656574-3fa5b6bcaafe
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x0E1893BEEb4d0913d26B9614B18Aea29c56d94b9 | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x0E1893BEEb4d0913d26B9614B18Aea29c56d94b9 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash74b8092a640a76ee248c2cb0b8ff04c4 10c2431e4cdc8a439f645210461f8254dcffa50d 404c9cdef66453a4503c2f219c96460fa049df2e25064a90eb1d3675901ffd7a
GET /v3/56/liquidity/0x0E1893BEEb4d0913d26B9614B18Aea29c56d94b9 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OnSAJN2Ll3eJQMLso9iHtTLtIMM6Qar%2BgKW5tVl6IvagH3K%2BPgUJFv6%2B8qi66uzpYzW02GUet2No46p7%2FUZoP41Pm%2Bo45nk%2FK4L6CPhDCet8EGoCQi0z4cWFNTWULRYdd2R8d1Kjd8IjXbY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f79a71c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/metamask.png | 104.26.3.169 | 200 OK | 5.7 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/wallets/metamask.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hash94915cd04c09db3b051619b5473e1eba e2704378fc1d79faa2e3b054299eba38da0c0084 3241b9711fff18a21c24c8331f9c6ed6c79cd2647008818bd68b15ee0291dd26
GET /web/wallets/metamask.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:54 GMT
content-type: image/png
content-length: 5738
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "42f9ce2617d6202af597e10d33973b34"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NEy93jDpadfIWLTDhlhe5VPpZlekjv54%2F3Nx6NE5A%2FsFDFuOTgGekZtaPRUBPh8q47LOf7KJNJJvkLYmGsTLCnaTWZAvMzVHxidL11usLuKp9u201n8Oh%2BbQqiVy9l8qyNuoRydnpIgl9ajCkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 1422
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd76aef5b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5298-309e53b67e4c2392.js | 76.76.21.241 | 200 OK | 65 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5298-309e53b67e4c2392.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (46912) Hash5b3d0e7658b834ddf95ad288d7a7bf0e 0ce802786dcdaf74961b06a2bf87ac07c92e56c4 cd284958f7187362f3a10d504382b8fef07a1751e8d5042ed6b5f436c7c4d648
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5298-309e53b67e4c2392.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 6422
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5298-309e53b67e4c2392.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"5b3d0e7658b834ddf95ad288d7a7bf0e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/5298-309e53b67e4c2392.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qpdmr-1713939656579-2ee0335a87d6
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x71f51e5070C7070B2d079c087BfA814642Fcef58 | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x71f51e5070C7070B2d079c087BfA814642Fcef58 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash74b8092a640a76ee248c2cb0b8ff04c4 10c2431e4cdc8a439f645210461f8254dcffa50d 404c9cdef66453a4503c2f219c96460fa049df2e25064a90eb1d3675901ffd7a
GET /v3/56/liquidity/0x71f51e5070C7070B2d079c087BfA814642Fcef58 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iJOIpmuT3fR7reCbd%2F6YDzt2wmQXQrR8SFsi4D%2B8SenUJmF80gE%2Bn31ytGpdTzdV8hDNuNfp5HuP56MSxuMlcWbM1mkdG3rYy%2BlWZ%2F37s2ZYLNf7m6DgqdfnYAbKueo7OXJJNIJ5WPWhbMQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f79a91c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/3804.5c782b135a9ecacd.js | 76.76.21.241 | 200 OK | 86 B |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/3804.5c782b135a9ecacd.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with no line terminators Hash51248ca3a7069f90dac31e324b5d577e e8b0cf2d6212a3e931fab48c0d669b6fdca6c11a ea6d7b09d0b72b833bd863e5a50eeca94556472bc275e70297b3f4cd22304b1c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/3804.5c782b135a9ecacd.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 55350
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="3804.5c782b135a9ecacd.js"
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:53 GMT
etag: "51248ca3a7069f90dac31e324b5d577e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/3804.5c782b135a9ecacd.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939653411-d0fd85ddbd86
content-length: 86
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/a7f416de-aa03-4c5e-3280-ab49269aef00?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 2.1 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/a7f416de-aa03-4c5e-3280-ab49269aef00?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image Hash2052ea08b332c87388dc42097624cb20 8b82e1e2dd5a482ae90433c763b268b99f6cf093 11a824e4c63932ec7c2684c8c9554c84461efb5d731d15387d77bb5c3e78f9d5
GET /w3m/v1/getWalletImage/a7f416de-aa03-4c5e-3280-ab49269aef00?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:57 GMT
content-type: image/webp
content-length: 2090
cf-ray: 8793fd8c08b1569c-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 26669
cache-control: public, max-age=31536000
etag: "cfeV6YXTHd_vyfarpvxqg62GCGUG7FeV1c8ZwDJoU7DQ"
expires: Thu, 24 Apr 2025 06:20:57 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=799+0 c=1+22 v=2024.2.2 l=2090
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=nGW26j4HQVCPwi9Od2Rnq1oisBY.HJ9MQ826ksqfmmg-1713939657-1.0.1.1-I36hyPKY2LqZDWkTyB9JlNUWucRRtMjL8zeIEboJjIftlzrGdkbdKknaOvnqBrBLJFO7WZb34GKVbWEMUTB77A; path=/; expires=Wed, 24-Apr-24 06:50:57 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/index-6817957154e9a0f5.js | 76.76.21.241 | 200 OK | 150 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/index-6817957154e9a0f5.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (12398) Size150 kB (150157 bytes) Hash98845a6836c708922668399cf6d31bf4 d6272600b9cc24298fe79ea72c247d8cda319a0b 651395c88c5d5dca37f6b25d9cfdfea3249443a70713100720240988f68aa2fd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/index-6817957154e9a0f5.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 541034
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="index-6817957154e9a0f5.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:52 GMT
etag: W/"98845a6836c708922668399cf6d31bf4"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/pages/index-6817957154e9a0f5.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::tntgm-1713939652159-e30e4b734de1
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js | 76.76.21.241 | 200 OK | 26 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (25929) Hash63c3a4ce0da82887fce6748caa0cd005 43a32cbb7cf8d5186d99f245bbb3ce0c578be4f3 eff2b341ff03249262f314d9527c98f30778a6192e1c5cd7716dc130d7a8ff12
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 55350
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="quote-worker.1ac00aeec6a8b8d4.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:53 GMT
etag: W/"63c3a4ce0da82887fce6748caa0cd005"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jgkcj-1713939653570-6b2d51b4a438
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x3Cb75d72401d2DBA4349C696824F1397277d6a11 | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x3Cb75d72401d2DBA4349C696824F1397277d6a11 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash7d27b65da045eaad03ab775fc8cdd666 18757ee6da93d69e7b4028a36ca90cab53d14e86 88c741641d9f8b1173604a97cab7a15beb7d9387e32ad9d7de04d7fe50d978b3
GET /v3/56/liquidity/0x3Cb75d72401d2DBA4349C696824F1397277d6a11 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Air7Xg9n3UzSRZBNpXXm%2BvfCQKeTZh%2BMsXBNfBnI84LEoVAVvT4t6fKdSUcww01cKUmPDo0UKHaFri%2Fq47NJVcFgmoJkZdXVNVvESSxAPaZwGbmMZxyoVvPP3QViW%2BggE0N4N9PAYIDgmZc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f59841c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| verify.walletconnect.com/e542ff314e26ff34de2d4fba98db70bb | 52.57.86.163 | 200 OK | 0 B |
URL GET HTTP/2verify.walletconnect.com/e542ff314e26ff34de2d4fba98db70bb IP52.57.86.163:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerAmazon Subjectverify.walletconnect.com FingerprintAF:A5:B3:2A:56:4F:A2:53:AF:7F:63:AD:1B:CA:9C:F3:24:76:E3:42 ValidityMon, 05 Feb 2024 00:00:00 GMT - Wed, 05 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: verify.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: text/html; charset=utf-8
content-length: 190
content-security-policy: frame-ancestors https://*.pancakeswap.finance https://pancakeswap.finance
x-csrf-token: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjE3MTM5NDMyNTV9.RmDGBodGj7XBTw1oEl1Leh1j5RkjOG6qScuoqCBMWVI
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/swap-1de892e78c30cd84.js | 76.76.21.241 | 200 OK | 134 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/swap-1de892e78c30cd84.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Size134 kB (133849 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/swap-1de892e78c30cd84.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 6417
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="swap-1de892e78c30cd84.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"7fb4171fd9c17d8138eeddda4b3a30be"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/pages/swap-1de892e78c30cd84.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::czcxr-1713939656364-f6725bd1a367
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/73f6f52f-7862-49e7-bb85-ba93ab72cc00?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 2.8 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/73f6f52f-7862-49e7-bb85-ba93ab72cc00?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp Hashf5c89ff82dee2a99c7fd3d8c2572cadb f508f5771e1d44c1b018f9b76c0059bfaf661cfb cb9fb4000086474f84dcae9a54dd2862d09878bc505f1d4b5525755a5723eca9
GET /w3m/v1/getWalletImage/73f6f52f-7862-49e7-bb85-ba93ab72cc00?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:57 GMT
content-type: image/webp
content-length: 2762
cf-ray: 8793fd8c08a5569c-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 43895
cache-control: public, max-age=31536000
etag: "cfRMNMx7h0m2-_fAD9P7SygyPPUG7FeV1c8ZwDJoU7DQ"
expires: Thu, 24 Apr 2025 06:20:57 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=39+0 c=1+24 v=2024.4.0 l=2762
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=_sdcT4svQtgQuaOmewmzhWijwKpCoxF1SF.lAhoBFTo-1713939657-1.0.1.1-Lf1K1BRYPkEoBtiJcG0Ub4GbVc4.B9RF9hOAHOqK3cNm7jg00WL4W8lWZv6Ol1mJo7eJ229gRKzgiSo1vgLihQ; path=/; expires=Wed, 24-Apr-24 06:50:57 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x436380Bd2404aBA3f20c0ea68F343f5a174532a7 | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x436380Bd2404aBA3f20c0ea68F343f5a174532a7 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashc937803ae3ae5ebc3c4085d40cf336b3 58d5706ae3be96b1d95ea13adb3ea130612a3f8d 7f4e45cf6772bec904d0cbaa57c1e7988671108ecc4daa0da9339cffcb35c8ac
GET /v3/56/liquidity/0x436380Bd2404aBA3f20c0ea68F343f5a174532a7 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rKv6XffkfvIO4NDimq8QUXB9IDbgHPtDyIpnQ81TDJ%2BjZ5vzU%2B6oHQ8ODEtjpCpTVCOTGrEYCPnTkdFGoZN7NA3Fd0nt8moiaNjuETGHliN8B6q9%2BL%2F87lushlgFaB2GjRX2doU1XLkdSJ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f59751c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x2dA32920A775CF121004551AbC92F385B3C0Dab9 | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x2dA32920A775CF121004551AbC92F385B3C0Dab9 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash519af27feeb36f927f4e11f39527899a a47a01b2e11f9f6f92fd53f359c7472b072c5c9c cce0457ccde00e56b60d6c785b3132503f60dd60cae07c30e2af5978b6e36944
GET /v3/56/liquidity/0x2dA32920A775CF121004551AbC92F385B3C0Dab9 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=awxAYDXjb6guPUQm17DeG%2BQ6hml0emzG3NdzEf%2B4DWhOMXzmyhadn5VZmt%2Bx508lE4wS%2FB0NefBLFRseX64pQ%2B4P4a0iYMAiGyADjJQOUzwAohyXS2koZqPZKFwwFzPlJ0aMxHNIDPHkK4E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f69931c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x89CC4347Eac9bdf71f9d783c7a25729e5C579108 | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x89CC4347Eac9bdf71f9d783c7a25729e5C579108 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashca33ced07ec56137a7c9231f6f33adc6 c11d44655c998bb484e48aac74b584cbd805d155 d548041975e3ab8af45432f824ed87b905bab8187442ffb8611d15c792d9c63e
GET /v3/56/liquidity/0x89CC4347Eac9bdf71f9d783c7a25729e5C579108 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XsIIB1JVjz61ruQyNBxWsPlzpTcLcNyrlYHKPYUsNhF3B2TzHn98q8CFrrL1ATOHAg3LZYjZf%2FCmQJKKwMeGe141EqeTj07j74F5BwtAzXkARByP6XfEWvffIe8RQIYoGnPuqbqypCikEdM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f495e1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ | 76.76.21.241 | 200 OK | 6.5 kB |
URL User Request GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ IP76.76.21.241:443
CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeHTML document, ASCII text, with very long lines (6776), with no line terminators Hash7e206337e144e1617a9f08a97027794a ed7141b49e98c3ee14831fd5f7507cd44ece17e7 0bd1a9429be7fe9a83180d9bbea951a6c25cf4b21c745903c48381f89c50b23c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 453769
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: text/html; charset=utf-8
date: Fri, 19 Apr 2024 00:18:02 GMT
etag: W/"3u9pit5mt051f"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /
x-powered-by: Next.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::iad1::6m4hn-1713939651732-9eceb5e73b50
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/chains/56.png | 104.26.3.169 | 200 OK | 1.2 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/56.png IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 48 x 48, 8-bit colormap, non-interlaced Hash241ddcd7ff9541b1839703882d91d404 5b6ada17f54077b5e020d91af0c8ebe99b06bb88 8b7f54e9045d2beca6b4d124b97c84b9c2e84d14c709b6f3b160fae209ff08e0
GET /web/chains/56.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: image/png
content-length: 1158
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2eba283c17774595a0733544bc896fba"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sf28G9Oq8uq3HDegoraP4oRWR4%2BDgYDQTWwcc94l7AtxmAvZY3tBHKARor%2FQk%2FAnrmBlSOhE27LbovOcuuITAkTd00byq%2BKrpoNV7RwS7wjp1uK73S%2FLvUJhhPdaFZwivnKxEnwz%2FRYYR9j43A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 1423
accept-ranges: bytes
server: cloudflare
cf-ray: 8793fd7bba4ab4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x729c9a7E1f642Eab4019dfb0d467f4a9838E7cbD | 104.26.14.21 | 200 OK | 200 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x729c9a7E1f642Eab4019dfb0d467f4a9838E7cbD IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash8c9d327715f14b9f4f17f4dd568962bf 47fe0bd4bae33c63b124465f2f1efa15498dfe04 ab0dcbe761555c5401d61f77219b94bb74998cd7a1f03650021b7429b8e4ffb9
GET /v3/56/liquidity/0x729c9a7E1f642Eab4019dfb0d467f4a9838E7cbD HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NLd31BrmjmbqjYlUH9%2BEZRcZi5Qmy%2BNxha%2FNvQ%2FLVV%2F0poiccBmqg7GiSgxfknPXz7pyl2WRX%2BvDQD04velKzW3B9lkQWLuyJc9ZUwJSDZ6FyCWaxKBMFsAgN2nf3osrZeZbyHS2H1ylzis%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f69881c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8210-a585b5bf27b841b8.js | 76.76.21.241 | 200 OK | 9.8 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8210-a585b5bf27b841b8.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (10097), with no line terminators Hash31c868d0c86ddc761e543cf721634026 a4fc9be8992d76293a4cc42d52f194af238ce307 4219f9854a0e56faeba171019032644385a0c4677b4f55cf98ad2083a1654855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8210-a585b5bf27b841b8.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 6417
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8210-a585b5bf27b841b8.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"413d76e3c613fdf5a99563847e8bb75d"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8210-a585b5bf27b841b8.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::czcxr-1713939656610-5b4d0795dc2e
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8530-6fe22d42fec42cf6.js | 76.76.21.241 | 200 OK | 10 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8530-6fe22d42fec42cf6.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (4050) Hashc992e122cf3123cf16b6d1b8bc000bc2 1185a5a9eb5deb8301d5948f53c547b22b7a9509 399c78707bb4395617a5b14f9a9bae85fec3cae331b1024c717ebf340f2bd9a7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8530-6fe22d42fec42cf6.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 6417
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8530-6fe22d42fec42cf6.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"c992e122cf3123cf16b6d1b8bc000bc2"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8530-6fe22d42fec42cf6.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cq68b-1713939656661-dbe453cbc922
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/swap-1de892e78c30cd84.js | 76.76.21.241 | 200 OK | 134 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/swap-1de892e78c30cd84.js IP76.76.21.241:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Size134 kB (133849 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/swap-1de892e78c30cd84.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713939655.1.1.1713939655.60.0.0; _ga=GA1.1.1090957534.1713939656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 6417
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="swap-1de892e78c30cd84.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Wed, 24 Apr 2024 06:20:56 GMT
etag: W/"7fb4171fd9c17d8138eeddda4b3a30be"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/pages/swap-1de892e78c30cd84.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::czcxr-1713939656676-125e033e7104
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x088464e4E8CC54BF91180cBb8c61C68AeCC74166 | 104.26.14.21 | 200 OK | 204 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x088464e4E8CC54BF91180cBb8c61C68AeCC74166 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash40c7457decc39890cd42bfe8ad663893 37d6c60d73236f683694da15c780cbe473759d87 dc33bc52650181cf0655afc29601fb90331086b5cdda4ba096ae4d8f55d16a00
GET /v3/56/liquidity/0x088464e4E8CC54BF91180cBb8c61C68AeCC74166 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MTurKfAV2RRzmxAKxSnprYa3NDMpekhpcjtORnUMgZvK4rIdPSYCfje2zl2mtnq4KLefHDcWZMLPG8QtWvMDPshgmXZE0BpMvFFCvRDkdtExH7gY1Y02fqq8k8IzOWOUCtuvG5rbXqhQbpk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f49651c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x7d05c84581f0C41AD80ddf677A510360bae09a5A | 104.26.14.21 | 200 OK | 197 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x7d05c84581f0C41AD80ddf677A510360bae09a5A IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash25106e97c260b24d594183aa847ee105 0c6ba834042d6862d044174a415e60b455e352da a84413c94df91a8287aac9a84899ce874353a669bfb70325ef07de608ddbc94b
GET /v3/56/liquidity/0x7d05c84581f0C41AD80ddf677A510360bae09a5A HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FL5v48UyaLdvYIVBreSNFiVXB9xz%2BphtQrfEMpydc8fdTywS5PSRu3aTdh%2FaQBSXR%2FPmI1pwN3lb6ir83Rr%2BbgLJc0swZOwdIlLNY9e59xZ6A%2BZVmcaJVaxgdd9GTmW1uGJ8FdKMe6ViMvg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f79a11c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-334KNG3DMQ>m=45je44m0v873867766z8834067533za200&_p=1713939653602&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1090957534.1713939656&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713939655&sct=1&seg=0&dl=https%3A%2F%2Fpay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app%2F&dt=Home%20%7C%20PancakeSwap&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=4309 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-334KNG3DMQ>m=45je44m0v873867766z8834067533za200&_p=1713939653602&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1090957534.1713939656&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713939655&sct=1&seg=0&dl=https%3A%2F%2Fpay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app%2F&dt=Home%20%7C%20PancakeSwap&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=4309 IP216.239.32.36:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-334KNG3DMQ>m=45je44m0v873867766z8834067533za200&_p=1713939653602&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1090957534.1713939656&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713939655&sct=1&seg=0&dl=https%3A%2F%2Fpay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app%2F&dt=Home%20%7C%20PancakeSwap&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=4309 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
date: Wed, 24 Apr 2024 06:20:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/kanit/v15/nKKU-Go6G5tXcr5KPxWnVaE.woff2 | 216.58.207.227 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/kanit/v15/nKKU-Go6G5tXcr5KPxWnVaE.woff2 IP216.58.207.227:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19572, version 1.0 Hash24ad3fea714cb5e100aa16f832531bf3 a5475cd37afb39fc2472ef8391a4a3fd900122eb 7196c3002f08704f9f99de95b6357969a512eaa9a766eee693921dce72927cea
GET /s/kanit/v15/nKKU-Go6G5tXcr5KPxWnVaE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19572
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:38:49 GMT
expires: Fri, 18 Apr 2025 02:38:49 GMT
cache-control: public, max-age=31536000
age: 531725
last-modified: Thu, 20 Jul 2023 20:50:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/kanit/v15/nKKU-Go6G5tXcr5KPxWoVaF5NQ.woff2 | 216.58.207.227 | 200 OK | 11 kB |
URL GET HTTP/2fonts.gstatic.com/s/kanit/v15/nKKU-Go6G5tXcr5KPxWoVaF5NQ.woff2 IP216.58.207.227:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 10572, version 1.0 Hash8a0a6eaf18306910de756b986bbef9b2 2eeca7d47e919a37d7ba91d4ecfec47da2019721 825df5cc06c5d4e5ace9ecc77ce4e06d83425e333ee13a35b0190df2e6a56d16
GET /s/kanit/v15/nKKU-Go6G5tXcr5KPxWoVaF5NQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10572
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 03:16:08 GMT
expires: Fri, 18 Apr 2025 03:16:08 GMT
cache-control: public, max-age=31536000
age: 529486
last-modified: Thu, 20 Jul 2023 20:50:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/pancakeswap-bnb-mm.json | 104.26.2.169 | 200 OK | 2.6 kB |
URL GET HTTP/2tokens.pancakeswap.finance/pancakeswap-bnb-mm.json IP104.26.2.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
File typeASCII text, with very long lines (2826), with no line terminators Hash2fbf6d360c108b0878de1ad59870325f 4b4d03ad4727cd19ff23072c541bfc1b22bdd122 d4c4ca6a56be0f07e367bd39d0446bf879bf428f8e24cfee17ab54cb45c50410
GET /pancakeswap-bnb-mm.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:55 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"faf77b0d59ffb744af6dfc91e89864da"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q4IRQGaNXr36FQsKl7Ay31rSfHLZY%2FQH4sBJbUN1mB5Yq92cDqN2aJ3ALOias77%2FhV8vOxCjFxHjaeHjDXaFXPblGq%2FPbZppKvZkiu6RixSR8hL%2FgP2Q7TBM%2FzRKicGIzoOwvBsD1PcCxWCD7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8793fd7ebfd1b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0x4e1f9aDf96dBA6Dc09c973228c286568F1315ea8 | 104.26.14.21 | 200 OK | 114 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0x4e1f9aDf96dBA6Dc09c973228c286568F1315ea8 IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashe7373e1e5913a3670acc5f7c7472c22a 78031bc2d501ac53bda5d2f149d42eb12ed26155 2c3cfd94270bd453ba0c156e6121acd5c46ab3a92b77f3132eff092233e46666
GET /v3/56/liquidity/0x4e1f9aDf96dBA6Dc09c973228c286568F1315ea8 HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ABvyZ%2BYXomBSzPWAEIc9XDCjE8%2FhsVl1%2FL7H20cvhvzGQjkuaSPKNytGVtqo3xuShtWvhrPxDLduJRTaml0muGsD4jjvNwgfSgW3Mq8tQ5PUcsOht8GywJBV6Fmi1V9IM1xmQ9v6dG%2FcZgw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f59851c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| farms-api.pancakeswap.com/v3/56/liquidity/0xAE7a3D9bed2ba4ef9c134FF4BAeE33655AE5DE6f | 104.26.14.21 | 200 OK | 194 B |
URL GET HTTP/2farms-api.pancakeswap.com/v3/56/liquidity/0xAE7a3D9bed2ba4ef9c134FF4BAeE33655AE5DE6f IP104.26.14.21:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/ CertificateIssuerLet's Encrypt Subjectpancakeswap.com Fingerprint93:D8:A0:CB:21:38:76:76:C1:52:A9:70:E8:16:C9:33:CA:3C:A3:F5 ValidityMon, 04 Mar 2024 09:02:28 GMT - Sun, 02 Jun 2024 09:02:27 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash23487b714262054f8fa0b0365addc14d b29f2a57be9744ca424f33443b1c9d5a7f7d2a84 751d3ffce1d791ba0401bb30b6b846c9ff94e4eca5d29c45e4b9df784e71cbb9
GET /v3/56/liquidity/0xAE7a3D9bed2ba4ef9c134FF4BAeE33655AE5DE6f HTTP/1.1
Host: farms-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:58 GMT
content-type: application/json; charset=utf-8
cache-control: s-maxage=30, max-age=20, stale-while-revalidate=120
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6FzyicKVV%2B1jK1fwvp1Z0geclvTu%2B%2BAbukB9xfY7OfJvIVYu%2B4jalYtuL9FvSD9cUFjrP%2BwQ649d4YxsaPh9kkngRyqjRnY5VGha2oTHi%2BrTTXgslnjr7G6gL0F7fcAPJZFfxx5Pe3yWelI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793fd8f49621c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
0.0.0.0